General
- Target loader.exe
- Size 2.6MB
- Sample261022-tfprps11g1
- SHA256 bf6dfa5f6718abda5878999e33a0c8db28ac66a9f13868781f504cff953dd1ff
- MD5 8be610158a165dc479a10403e3a229cc
- SHA1 9f65bcd6264b50d2efd9d037fb95ac9af7a03fec
- SHA512 f87a8e4ccc542f163d4f2cdecb0974b99ccf77e94d0879ad6c2e1a0ccc68728d6d06436985b9f1e0695e0d095069c048e6dec5331c57ae5c55aea9448b8a3231
- SSDEEP 24576:yH6KQn/FYRIiPlTgufNOnJ50euZhndvYXoyJOgDTNZqiPvR8O3pLy5yqAV:yWFmOGkJOtndAXl88NvRtxW
- TLSH T14EC58D13E2524699C526953485E2E336FB757C701B31838B26DD3E336EB3AE06DB9381
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loader.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
loader.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target loader.exe
- Size 2.6MB
- SHA256 bf6dfa5f6718abda5878999e33a0c8db28ac66a9f13868781f504cff953dd1ff
- MD5 8be610158a165dc479a10403e3a229cc
- SHA1 9f65bcd6264b50d2efd9d037fb95ac9af7a03fec
- SHA512 f87a8e4ccc542f163d4f2cdecb0974b99ccf77e94d0879ad6c2e1a0ccc68728d6d06436985b9f1e0695e0d095069c048e6dec5331c57ae5c55aea9448b8a3231
- SSDEEP 24576:yH6KQn/FYRIiPlTgufNOnJ50euZhndvYXoyJOgDTNZqiPvR8O3pLy5yqAV:yWFmOGkJOtndAXl88NvRtxW
- TLSH T14EC58D13E2524699C526953485E2E336FB757C701B31838B26DD3E336EB3AE06DB9381
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1