General
- Target GoogleAdsSpainWinRarT1.exe
- Size 3.1MB
- Sample260928-ph79lsvsfw
- SHA256 f6e71c379e3c0b25b7be83b78f19e2950c8ee1dcc3829ca44b42099e4c9e194b
- MD5 b507f957d814d58e9a9290e12a1b8dc4
- SHA1 e684e742b6c3bf1f44ee9659bf6e1bfa4f2cddef
- SHA512 6c1ce6fabd00a655be50508ba4d9b3fa4c727b97c60f6fcabd09439edbab1e820cdc0d4877526939604564bd9d50e0a898f80532393a8d23c70698d48ed76a20
- SSDEEP 49152:x2JzNh2hpnzsQcooItwqqnSie8n8tCRIfgRTua+teofGDCZv3zuaN1ZHiHhPyQUl:xmIscdYUDkNg
- TLSH T1D8E58D09A3A900E9E027C17CCA578617EB72B40513359AFB5A928D573F23BF1673E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GoogleAdsSpainWinRarT1.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
GoogleAdsSpainWinRarT1.exe
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target GoogleAdsSpainWinRarT1.exe
- Size 3.1MB
- SHA256 f6e71c379e3c0b25b7be83b78f19e2950c8ee1dcc3829ca44b42099e4c9e194b
- MD5 b507f957d814d58e9a9290e12a1b8dc4
- SHA1 e684e742b6c3bf1f44ee9659bf6e1bfa4f2cddef
- SHA512 6c1ce6fabd00a655be50508ba4d9b3fa4c727b97c60f6fcabd09439edbab1e820cdc0d4877526939604564bd9d50e0a898f80532393a8d23c70698d48ed76a20
- SSDEEP 49152:x2JzNh2hpnzsQcooItwqqnSie8n8tCRIfgRTua+teofGDCZv3zuaN1ZHiHhPyQUl:xmIscdYUDkNg
- TLSH T1D8E58D09A3A900E9E027C17CCA578617EB72B40513359AFB5A928D573F23BF1673E721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1