General
- Target sillyslut.exe
- Size 96KB
- Sample261002-rabxjs11at
- SHA256 6fbbddfc38f261605d74d9b679b0e97e0511530bf0f251815537896ba3f914dc
- MD5 993bd6a56fe3e83b5fb40550ed64a23b
- SHA1 43a831340a79d7a45863f36e2e6f9aca658aa120
- SHA512 23e6fc4ffc815dd44ed5ffdb1e53b105ecd6a496d06f21add8b33b8d32585708c284330bf9ffe0fc2372c3804995ce5ab77e10c7a08e0de2cdaae728a12fcb41
- SSDEEP 1536:/7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfawSeWFJ8DFs4VHT:z7DhdC6kzWypvaQ0FxyNTBfaBe/F
- TLSH T182A37E41F2E102F7E6F2053100A6726FDB3663389764ADDBC74C2D529913AD1A63D3E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
sillyslut.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
sillyslut.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target sillyslut.exe
- Size 96KB
- SHA256 6fbbddfc38f261605d74d9b679b0e97e0511530bf0f251815537896ba3f914dc
- MD5 993bd6a56fe3e83b5fb40550ed64a23b
- SHA1 43a831340a79d7a45863f36e2e6f9aca658aa120
- SHA512 23e6fc4ffc815dd44ed5ffdb1e53b105ecd6a496d06f21add8b33b8d32585708c284330bf9ffe0fc2372c3804995ce5ab77e10c7a08e0de2cdaae728a12fcb41
- SSDEEP 1536:/7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfawSeWFJ8DFs4VHT:z7DhdC6kzWypvaQ0FxyNTBfaBe/F
- TLSH T182A37E41F2E102F7E6F2053100A6726FDB3663389764ADDBC74C2D529913AD1A63D3E9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Creates a new local user account
Uses net.exe to create a new local user account, often for persistence or a backdoor account.
MITRE ATT&CK Enterprise v16
Persistence
Account Manipulation
1Create Account
1Local Account
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Account Manipulation
1Event Triggered Execution
1Netsh Helper DLL
1