General
- Target 9jRyGEZ8mt1v2PK.exe
- Size 2.4MB
- Sample260930-wref8aef52
- SHA256 8b441ab4f1a25fae9a46db53b17d64cab7293ca710b202ba1a96c5c826737bde
- MD5 2d16a6173ca98c84a49f6b90f2697c5e
- SHA1 b71991a176cb3b5492ebabcab76e4ae780a50c7b
- SHA512 7d152f836964b9d291dfc52dd878eea78ee2da2413a779df02689e76d7dad84c3abc74563ad57f381195e1f59e410f211aceab7017def533ef4980aa6aa926f4
- SSDEEP 49152:jQZX1YsxW42Qk4TjkAR7njkilrYeb2eb2zzh0Tpgjjd9SrBz957T:HtxQdfBk6seb2eb2zV8gjHSrBz9
- TLSH T16EC5238B7285439ED0B875769A66821103D1D3E732FBE685FE5B02D31E033FA5E942C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9jRyGEZ8mt1v2PK.exe
Resource
win10v2004-20260911-en
14 signatures
300 seconds
Behavioral task
behavioral2
Sample
9jRyGEZ8mt1v2PK.exe
Resource
win11ltsc2024-20260911-en
14 signatures
300 seconds
Malware Config
Targets
-
- Target 9jRyGEZ8mt1v2PK.exe
- Size 2.4MB
- SHA256 8b441ab4f1a25fae9a46db53b17d64cab7293ca710b202ba1a96c5c826737bde
- MD5 2d16a6173ca98c84a49f6b90f2697c5e
- SHA1 b71991a176cb3b5492ebabcab76e4ae780a50c7b
- SHA512 7d152f836964b9d291dfc52dd878eea78ee2da2413a779df02689e76d7dad84c3abc74563ad57f381195e1f59e410f211aceab7017def533ef4980aa6aa926f4
- SSDEEP 49152:jQZX1YsxW42Qk4TjkAR7njkilrYeb2eb2zzh0Tpgjjd9SrBz957T:HtxQdfBk6seb2eb2zV8gjHSrBz9
- TLSH T16EC5238B7285439ED0B875769A66821103D1D3E732FBE685FE5B02D31E033FA5E942C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Hide Artifacts: Hidden Files and Directories
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
1