General
- Target d54c179d1e130d98655427a9dac4db42ccd962840a5d4688bc6e3098c583a809
- Size 7.2MB
- Sample261002-v5hkcssbjd
- SHA256 d54c179d1e130d98655427a9dac4db42ccd962840a5d4688bc6e3098c583a809
- MD5 7a0175c35de37827958313318560f01e
- SHA1 44904124b5a82d78ec203e9b82256559fe4d7f32
- SHA512 ff7d6a9a739470651f23e9ded20b0fb6e5c8310d44455e7418dfff42a5a7756b1325dbc009c86c132790b161aa1a0de5ed38f4c2204cc19fd99a8740d1853acc
- SSDEEP 98304:LeRLZpNct/Ujn6LdxYkPXo+GOKkT3JkLoEL78woli84Lqd1Zh3DLLA1xZUI2JSww:8ZpNctMj6LdxYf63JXKod4QZnLgUY
- TLSH T12E769D20E711D02BF8E300B1D67D57AE5558AB30035504DBB3CC6E9E6BB5AD2BB32A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d54c179d1e130d98655427a9dac4db42ccd962840a5d4688bc6e3098c583a809.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
d54c179d1e130d98655427a9dac4db42ccd962840a5d4688bc6e3098c583a809.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target d54c179d1e130d98655427a9dac4db42ccd962840a5d4688bc6e3098c583a809
- Size 7.2MB
- SHA256 d54c179d1e130d98655427a9dac4db42ccd962840a5d4688bc6e3098c583a809
- MD5 7a0175c35de37827958313318560f01e
- SHA1 44904124b5a82d78ec203e9b82256559fe4d7f32
- SHA512 ff7d6a9a739470651f23e9ded20b0fb6e5c8310d44455e7418dfff42a5a7756b1325dbc009c86c132790b161aa1a0de5ed38f4c2204cc19fd99a8740d1853acc
- SSDEEP 98304:LeRLZpNct/Ujn6LdxYkPXo+GOKkT3JkLoEL78woli84Lqd1Zh3DLLA1xZUI2JSww:8ZpNctMj6LdxYf63JXKod4QZnLgUY
- TLSH T12E769D20E711D02BF8E300B1D67D57AE5558AB30035504DBB3CC6E9E6BB5AD2BB32A17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1