General
- Target 01102026_0652_30092026_30.09.2026.Img.zip
- Size 1.8MB
- Sample261001-hm96fada46
- SHA256 a6c21adda62a3652461ab092ccee817fd006d247f5e0baf06b7a21c60b0a03a3
- MD5 fad2d5fe6e47ad7e97865cda3ea3045c
- SHA1 31b6adbf2c56c263ed4afb68b95231067b79ffd7
- SHA512 20bad91e04aef9e728bd7827c92ab1fe736dda7ee854db55c75f0a3b32bdef5c1700e0b28a5d3abcf27aa757d258ace60e1144c390f1ce6fe98ce19b28996f45
- SSDEEP 49152:+7uxvVWd1hwEq+igVRk+2wQgQ9Ds28hIp7P1H:+Kxw7Kg0+2BW28h479H
- TLSH T1529523FC6ED119D296E86DF61BF4CF81581905CFD66AB8B5126E0E88EEC4CC4A0E4173
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
0903087850142.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
0903087850142.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
mfc140u.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
mfc140u.dll
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target 0903087850142.exe
- Size 451KB
- SHA256 5ef3fe4a5e70d3750a11c73902e35b50b9ac007e8a95dde0569bf6bae17da73a
- MD5 cb39911e14440fea03b4b1d1d0be174d
- SHA1 788e88052b9713bc3c311cb2950d1eadaa0a09fc
- SHA512 94bde5bf1cb0bb530da2639be33d52cac596fe5334075f2486dc037c038133a52ffd313ad669a9cb94228ca3bc0ce601a914965fd1c8eb9a347068dbffcf7dda
- SSDEEP 12288:f4tScU2NR/IHNTgasTKV+KGoS2Rqyi1/w9M6Bsb:f4tk2YaasTKPRqyGjCsb
- TLSH T131A48E217667C136CA5282B04E7DDBAE907DABF00FA268C7B7C40EAD5D700D16735A1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target mfc140u.dll
- Size 5.0MB
- SHA256 af425fff52b81160f9b51524e65e1d765fdef170a2cfb1442794f2b11190c5bb
- MD5 eacbe787936959fe069068d5769bac08
- SHA1 d03c69381702375269dbd025a4e15608fc32d858
- SHA512 7cd64a9c32216f6b48726996ccaecade7bd96c6fc6b6ecd756e1be8b74d0029aaeefb2ef6f6913a2e1500b07ad7fea6a056c2d0923d7f1e3aec06e61e0cf521b
- SSDEEP 49152:hBJaBPv863I2LDXWUmsdwIGPFXSSu5cKUuIPhv8nXwWAWmuGGdJOE+plly4:hkRfLzWuJ+FX9BuI98bAVuzJh+dd
- TLSH T18C361AB14207961CE7FFC6B4509DD22972329E27D1934EA3FDC52D34AA6BE44E11833A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1