General
- Target 3ac37e42b89738e92c47e4efbac4ff4bfed61a9ee654a48be18a12bab26a3b8f
- Size 1.9MB
- Sample260924-szr6hawbpb
- SHA256 3ac37e42b89738e92c47e4efbac4ff4bfed61a9ee654a48be18a12bab26a3b8f
- MD5 6640f47a8f292c4e48585fb48291036c
- SHA1 757949e6951a8b049df4e3c60c00ce74e2dcdf82
- SHA512 ec7c7ebddffd59dcb2d230e904c5699d1b8f539c1ba52fefb70d485c0aa8abf8015e4eea975df47c7f85f3fe442d4ab4e9e0098962ee9ca78ecd39eac9e52d8b
- SSDEEP 49152:9xggETA3iiTHcf428asHGhQvt3ECtLtOPW5mCgJB2A1:9xgJAlwf83/S9PWmfJIA1
- TLSH T1589533C254AAE93EF2D3547AFA60D8C02609ED16045627E309BBFD1DBA31B9817D07D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
3ac37e42b89738e92c47e4efbac4ff4bfed61a9ee654a48be18a12bab26a3b8f.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
3ac37e42b89738e92c47e4efbac4ff4bfed61a9ee654a48be18a12bab26a3b8f.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 3ac37e42b89738e92c47e4efbac4ff4bfed61a9ee654a48be18a12bab26a3b8f
- Size 1.9MB
- SHA256 3ac37e42b89738e92c47e4efbac4ff4bfed61a9ee654a48be18a12bab26a3b8f
- MD5 6640f47a8f292c4e48585fb48291036c
- SHA1 757949e6951a8b049df4e3c60c00ce74e2dcdf82
- SHA512 ec7c7ebddffd59dcb2d230e904c5699d1b8f539c1ba52fefb70d485c0aa8abf8015e4eea975df47c7f85f3fe442d4ab4e9e0098962ee9ca78ecd39eac9e52d8b
- SSDEEP 49152:9xggETA3iiTHcf428asHGhQvt3ECtLtOPW5mCgJB2A1:9xgJAlwf83/S9PWmfJIA1
- TLSH T1589533C254AAE93EF2D3547AFA60D8C02609ED16045627E309BBFD1DBA31B9817D07D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1