General
- Target ub.exe
- Size 21.9MB
- Sample261023-jp2gra1t2j
- SHA256 5482a7982a110f26bb97671f60548aac05c4bd7dae2ff8608f5ac2510ef231f4
- MD5 7c1b7a66606cef5c28ae9742bbbc12e5
- SHA1 6e0f38086d80d99a525964eb6d0cdc138d0f3f61
- SHA512 08f85bee03c4695d08e96cafd4c67dc873f3107c8dbd85aa40fb345502ad3c773b7e1d49825e13fdaa28be054b3b23df0693cccca484715a0ac7ef8381e9a4b1
- SSDEEP 393216:NX9Jx67u5PMBbVvStamjy5FN1NceKyp4htyK1vh6+4uO3I:N16OPMBbpYvy55KyC73nj45
- TLSH T1693733083A718CD6FA2B803A9CB11B294772B51E131ADBEFB5A275910F5DBF17934B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ub.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
ub.exe
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target ub.exe
- Size 21.9MB
- SHA256 5482a7982a110f26bb97671f60548aac05c4bd7dae2ff8608f5ac2510ef231f4
- MD5 7c1b7a66606cef5c28ae9742bbbc12e5
- SHA1 6e0f38086d80d99a525964eb6d0cdc138d0f3f61
- SHA512 08f85bee03c4695d08e96cafd4c67dc873f3107c8dbd85aa40fb345502ad3c773b7e1d49825e13fdaa28be054b3b23df0693cccca484715a0ac7ef8381e9a4b1
- SSDEEP 393216:NX9Jx67u5PMBbVvStamjy5FN1NceKyp4htyK1vh6+4uO3I:N16OPMBbpYvy55KyC73nj45
- TLSH T1693733083A718CD6FA2B803A9CB11B294772B51E131ADBEFB5A275910F5DBF17934B01
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Impair Defenses
1Disable or Modify System Firewall
1