General
- Target millida-launcher.exe
- Size 66.6MB
- Sample261016-1rm6ksbh99
- SHA256 cf7611b1f380af278417db103dda0bb5cc73b0693c09ffa5038923fc5f1da621
- MD5 593c573b2137168ab27bd57a880356bb
- SHA1 4052934bc05b6ed617df0fb2eae4ff9f71e69d6f
- SHA512 2cae5a9c5450034de2ad496d0f3bf76e5ba2ea1f123efe26035656b15416c5008d42c1aaa89afc427e2959e71b066dae5449fce79ceaa20b571bd529dc16aabe
- SSDEEP 786432:hnGaHqTb4pXUPJmatSsQpx/mYiVCv7EgloMEAagfMo:J5AJPSBHm/Yv7ZloVMfM
- TLSH T1EEE78C617A5B996DD587C8B0D34786A71E2130DB0A35B9FF44C492383F7ABF46B38218
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
millida-launcher.exe
Resource
win10v2004-20260911-en
14 signatures
40 seconds
Behavioral task
behavioral2
Sample
millida-launcher.exe
Resource
win11ltsc2024-20260911-en
12 signatures
40 seconds
Malware Config
Targets
-
- Target millida-launcher.exe
- Size 66.6MB
- SHA256 cf7611b1f380af278417db103dda0bb5cc73b0693c09ffa5038923fc5f1da621
- MD5 593c573b2137168ab27bd57a880356bb
- SHA1 4052934bc05b6ed617df0fb2eae4ff9f71e69d6f
- SHA512 2cae5a9c5450034de2ad496d0f3bf76e5ba2ea1f123efe26035656b15416c5008d42c1aaa89afc427e2959e71b066dae5449fce79ceaa20b571bd529dc16aabe
- SSDEEP 786432:hnGaHqTb4pXUPJmatSsQpx/mYiVCv7EgloMEAagfMo:J5AJPSBHm/Yv7ZloVMfM
- TLSH T1EEE78C617A5B996DD587C8B0D34786A71E2130DB0A35B9FF44C492383F7ABF46B38218
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Family: CrypVault
Ransomware family which makes encrypted files look like they have been quarantined by AV.
-
Adds Run key to start application
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
2Install Root Certificate
2