General
- Target us0vifc.exe
- Size 5.0MB
- Sample261023-1st1hsd16w
- SHA256 833942236c5e05c8d4510a0c7ae59c5f38e90fb73231b9a4878a293416421076
- MD5 c43542c1df42040c8dea31fb639c95d4
- SHA1 c8a02923634d80e9dcef61203fb9821716ead292
- SHA512 871598e84940c398c59662eb35a1c892a3daf14a00f4e06f2288924aca25c00e0adfec944424563442c08211d883adb201c4778377b92a5414c1b1d98f9db6c7
- SSDEEP 49152:aEV4y3VkT8+HE1uxuMvAKrTZrNyA+2dWhT8p5QE4y3VkT8+HE3uxuMvAKrTZrNyN:ZjVmxdAGTZ3bbjVMxdAGTZ3bvA
- TLSH T13536E149D18B8B28EF622F3848549373C1F17CC987F1D3D3AE9E8D749A678B8596C640
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
us0vifc.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
us0vifc.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target us0vifc.exe
- Size 5.0MB
- SHA256 833942236c5e05c8d4510a0c7ae59c5f38e90fb73231b9a4878a293416421076
- MD5 c43542c1df42040c8dea31fb639c95d4
- SHA1 c8a02923634d80e9dcef61203fb9821716ead292
- SHA512 871598e84940c398c59662eb35a1c892a3daf14a00f4e06f2288924aca25c00e0adfec944424563442c08211d883adb201c4778377b92a5414c1b1d98f9db6c7
- SSDEEP 49152:aEV4y3VkT8+HE1uxuMvAKrTZrNyA+2dWhT8p5QE4y3VkT8+HE3uxuMvAKrTZrNyN:ZjVmxdAGTZ3bbjVMxdAGTZ3bvA
- TLSH T13536E149D18B8B28EF622F3848549373C1F17CC987F1D3D3AE9E8D749A678B8596C640
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1