General
- Target DeskRest_n.exe
- Size 5.9MB
- Sample260930-cpp1dsvt6j
- SHA256 51312177a9c81ae610e7b73a8d3330c54c130baf901516351d250357d0c3ff6d
- MD5 35956356b20f6d37c4fdcaf0d75804f0
- SHA1 18cfd77094a85ba4dd930cdcfc36fd0cbc01c446
- SHA512 c2315a202787f037ff399d629672fa1b711f678712e3f33db38746a33b61533fedd2135e01134ebfeacbfbfdf71839650e199271fe5c263c30b1f1a956c87af1
- SSDEEP 98304:bwREIfvga3KJh/dqfR72qwbtLh6XaYoT/4akS8egvZNjaq927/Th+DHZcJdSaOsy:hiYa6v/k79qT65oT/bgRpaq8LV+DCJdQ
- TLSH T1FB561223B287B03AF05D8B3345E2A13455F77A566472AEC29BE454ACCF360D03D3E6A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Behavioral task
behavioral1
Sample
DeskRest_n.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
DeskRest_n.exe
Resource
win11-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target DeskRest_n.exe
- Size 5.9MB
- SHA256 51312177a9c81ae610e7b73a8d3330c54c130baf901516351d250357d0c3ff6d
- MD5 35956356b20f6d37c4fdcaf0d75804f0
- SHA1 18cfd77094a85ba4dd930cdcfc36fd0cbc01c446
- SHA512 c2315a202787f037ff399d629672fa1b711f678712e3f33db38746a33b61533fedd2135e01134ebfeacbfbfdf71839650e199271fe5c263c30b1f1a956c87af1
- SSDEEP 98304:bwREIfvga3KJh/dqfR72qwbtLh6XaYoT/4akS8egvZNjaq927/Th+DHZcJdSaOsy:hiYa6v/k79qT65oT/bgRpaq8LV+DCJdQ
- TLSH T1FB561223B287B03AF05D8B3345E2A13455F77A566472AEC29BE454ACCF360D03D3E6A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1