General

  • Target
    taskhostw.exe
  • Size 27.2MB
  • Sample261014-vexatsytdw
  • SHA256 ad355e59d29c769ace5decf1e3214929fb720501a402474ca77f0d2f43bbb573
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      taskhostw.exe
    • Size 27.2MB
    • SHA256 ad355e59d29c769ace5decf1e3214929fb720501a402474ca77f0d2f43bbb573
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes a file named after a Windows system binary

      The file runs from a user directory while carrying the name of an executable that normally only exists in System32.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks