5b70ea3a3113f91e46fe218f216999e3514f194481632c88f99b787d59078dd9

Resubmissions

17/10/2026, 17:13

261017-vrt18stt6k8

17/10/2026, 17:10

261017-vpz5gawzhx3

17/10/2026, 17:06

261017-vmn97ah18r3

Sharing

Copy URL Twitter E-mail

General

Target
erto3e4rortoergn.exe
Size 3.8MB
Sample261017-vrt18stt6k
SHA256 5b70ea3a3113f91e46fe218f216999e3514f194481632c88f99b787d59078dd9
MD5 8757c7ad667741213ed2f8761ec0e6e8
SHA1 d1dad1afbcf2ac41ca349006819f7394f53c511b
SHA512 61388933a335eefb1feac537a0eefb62f107c0115de74c3c0b9f0a20bd5160b3a435d29227cdd71440c14678793f877f4fd9740268aa56eae051264495b08221
SSDEEP 49152:K38B7J61FtnF/wXJnJgSl5TKWEOiIbMssUoWZDbDUSIinWKnJbjQaBZ+oHPR:KFuJBPKjzUv91TXp5
TLSH
T11916BE56B1B800E9D1B7D07C8A879907E7723C450336A7FB22E4A6251F27BE18F7E611
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  erto3e4rortoergn.exe
- Size 3.8MB
- SHA256 5b70ea3a3113f91e46fe218f216999e3514f194481632c88f99b787d59078dd9
- MD5 8757c7ad667741213ed2f8761ec0e6e8
- SHA1 d1dad1afbcf2ac41ca349006819f7394f53c511b
- SHA512 61388933a335eefb1feac537a0eefb62f107c0115de74c3c0b9f0a20bd5160b3a435d29227cdd71440c14678793f877f4fd9740268aa56eae051264495b08221
- SSDEEP 49152:K38B7J61FtnF/wXJnJgSl5TKWEOiIbMssUoWZDbDUSIinWKnJbjQaBZ+oHPR:KFuJBPKjzUv91TXp5
- TLSH
  T11916BE56B1B800E9D1B7D07C8A879907E7723C450336A7FB22E4A6251F27BE18F7E611
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware defense_evasion discovery spyware trojan
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Suspicious use of NtSetInformationThreadHideFromDebugger
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

T1622

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Debugger Evasion

T1622

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Checks whether UAC is enabled

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2