General
- Target fbcee7f817c15939ba93bae12e2b2e12f131379978b84ca2b1d95aefb2abaebe
- Size 10.8MB
- Sample261014-3khzdstyfv
- SHA256 fbcee7f817c15939ba93bae12e2b2e12f131379978b84ca2b1d95aefb2abaebe
- MD5 da4bd07304c04865cfb0dea17fd50941
- SHA1 315fdb2cb13d2643ee0abd0d623b98c539fddf39
- SHA512 4af4fb7d31bfb135ef9f4f4377e77959318cbdf120c7b523dc6d6b814f0c61d9240c7d26c96c2fd8c8ea78c61d7d67a7a3797ebf78f6d52fca4673581db65990
- SSDEEP 196608:rbn1uvNGB+OeOl0l2HUdHkpRMaDEmC+BH5kjc4xScK3VttxnoKaIZ/h:H1EAoI0WsEDEX+BSjrEJVWIr
- TLSH T10DB60122B781C1B2F29A017036756B3F552C9A064B3509D7B38CEF6A6F325E1573F24A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fbcee7f817c15939ba93bae12e2b2e12f131379978b84ca2b1d95aefb2abaebe.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
fbcee7f817c15939ba93bae12e2b2e12f131379978b84ca2b1d95aefb2abaebe.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target fbcee7f817c15939ba93bae12e2b2e12f131379978b84ca2b1d95aefb2abaebe
- Size 10.8MB
- SHA256 fbcee7f817c15939ba93bae12e2b2e12f131379978b84ca2b1d95aefb2abaebe
- MD5 da4bd07304c04865cfb0dea17fd50941
- SHA1 315fdb2cb13d2643ee0abd0d623b98c539fddf39
- SHA512 4af4fb7d31bfb135ef9f4f4377e77959318cbdf120c7b523dc6d6b814f0c61d9240c7d26c96c2fd8c8ea78c61d7d67a7a3797ebf78f6d52fca4673581db65990
- SSDEEP 196608:rbn1uvNGB+OeOl0l2HUdHkpRMaDEmC+BH5kjc4xScK3VttxnoKaIZ/h:H1EAoI0WsEDEX+BSjrEJVWIr
- TLSH T10DB60122B781C1B2F29A017036756B3F552C9A064B3509D7B38CEF6A6F325E1573F24A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Modifies Windows Firewall
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
1