General
- Target portable.exe
- Size 13.6MB
- Sample260928-rrhresbb92
- SHA256 1468e3d24157ea45eabadcb2cde1d2e39906c28d5874b34057dd4b084acc958d
- MD5 8057ec6641b000b844de28478d8bf743
- SHA1 170c83873f53ce9f01216d880e257afbb3af425b
- SHA512 fdd6462aff9b72f20a462f695ef524982be47fa56848c7ae6050f9714aec9a793a910c12ab8733aa2889a4e80fa34b42b849fd3bff905049d6d3c221776569b8
- SSDEEP 98304:Jq/TP95/VVIMhRwf6COm1cfx185luBMfBcNkzNjJ160H+7EUqDKwW5+8wffN:JqLPnVVIMhWfGCHfKNoVPHWH5riN
- TLSH T17BE608257A5A99ACD09BC47483478A72497130DB0B35B9FF448496383F7ABF46F38329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
portable.exe
Resource
win10v2004-20260911-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
portable.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target portable.exe
- Size 13.6MB
- SHA256 1468e3d24157ea45eabadcb2cde1d2e39906c28d5874b34057dd4b084acc958d
- MD5 8057ec6641b000b844de28478d8bf743
- SHA1 170c83873f53ce9f01216d880e257afbb3af425b
- SHA512 fdd6462aff9b72f20a462f695ef524982be47fa56848c7ae6050f9714aec9a793a910c12ab8733aa2889a4e80fa34b42b849fd3bff905049d6d3c221776569b8
- SSDEEP 98304:Jq/TP95/VVIMhRwf6COm1cfx185luBMfBcNkzNjJ160H+7EUqDKwW5+8wffN:JqLPnVVIMhWfGCHfKNoVPHWH5riN
- TLSH T17BE608257A5A99ACD09BC47483478A72497130DB0B35B9FF448496383F7ABF46F38329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2