General
- Target 3eax cretive.exe
- Size 891KB
- Sample261002-19ebdsxsaz
- SHA256 25a50f01aaacb438e93e8465f92c15dd1d8c13ad9815d31caa6d9fe0b29c4be4
- MD5 adbd6755dbf7877319af67be2e5cbe87
- SHA1 459355fbdad4a8b48ee0b12ab43dbca1aced2cf9
- SHA512 dacacc49c982f2ec0feeb82b5a07b25ad5946054bcd9ae3d5b762ca82e7a4c1ca9a0e8f221cee92ade18eac083ec86c910ff134435abd471d20199baa3d1ba77
- SSDEEP 24576:BV+FiXFfgZzQiHEwu+hZkPUBYvZUtrxrUaOPOQ:ybZzQAoUBYvZKrxrUadQ
- TLSH T19D1517655AE18801FB388F7C4647752D37E3B6F123306A5B9ACACCF2DE0B2D1A01655E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3eax cretive.exe
Resource
win11-20260911-en
26 signatures
150 seconds
Malware Config
Targets
-
- Target 3eax cretive.exe
- Size 891KB
- SHA256 25a50f01aaacb438e93e8465f92c15dd1d8c13ad9815d31caa6d9fe0b29c4be4
- MD5 adbd6755dbf7877319af67be2e5cbe87
- SHA1 459355fbdad4a8b48ee0b12ab43dbca1aced2cf9
- SHA512 dacacc49c982f2ec0feeb82b5a07b25ad5946054bcd9ae3d5b762ca82e7a4c1ca9a0e8f221cee92ade18eac083ec86c910ff134435abd471d20199baa3d1ba77
- SSDEEP 24576:BV+FiXFfgZzQiHEwu+hZkPUBYvZUtrxrUaOPOQ:ybZzQAoUBYvZKrxrUadQ
- TLSH T19D1517655AE18801FB388F7C4647752D37E3B6F123306A5B9ACACCF2DE0B2D1A01655E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
1SIP and Trust Provider Hijacking
1