General
- Target Payload.exe
- Size 1.4MB
- Sample261016-2wewfasvbv
- SHA256 d6dbb65bc9f4f7a66c8cb3aa4f2ab9831a15c4b4c1d30ff8739be263dff5a3f2
- MD5 276027523c030ec2ae2234e0c00d446c
- SHA1 7cf579fb604f77b5bbb3d25719447b976c39203a
- SHA512 5c26e36e9b8deb2e9522eff1dd12f3ced6acbc4d51c327d972881dee352679e81c255c0f5374563ba1c680133de89947adf577d34a2b0b2137f1ed55adef0d9f
- SSDEEP 24576:udmORvZ6kpw9d7+NH8ksyt6fTBEEyyhUgUKSI3h+1:udmOvi99+Ncmt631UKSI3Q
- TLSH T1BD65E70DF9B67E12CA7C027BD21394FC01D3A5587702D2DBAAE52AC51F1ABADCDCA444
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target Payload.exe
- Size 1.4MB
- SHA256 d6dbb65bc9f4f7a66c8cb3aa4f2ab9831a15c4b4c1d30ff8739be263dff5a3f2
- MD5 276027523c030ec2ae2234e0c00d446c
- SHA1 7cf579fb604f77b5bbb3d25719447b976c39203a
- SHA512 5c26e36e9b8deb2e9522eff1dd12f3ced6acbc4d51c327d972881dee352679e81c255c0f5374563ba1c680133de89947adf577d34a2b0b2137f1ed55adef0d9f
- SSDEEP 24576:udmORvZ6kpw9d7+NH8ksyt6fTBEEyyhUgUKSI3h+1:udmOvi99+Ncmt631UKSI3Q
- TLSH T1BD65E70DF9B67E12CA7C027BD21394FC01D3A5587702D2DBAAE52AC51F1ABADCDCA444
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1