General
- Target d3d0adb964388a33de7dc817b073cb97f5d4a8fc964eefa05d3f828d6c812e02
- Size 5.3MB
- Sample261024-asfvsa1xdx
- SHA256 d3d0adb964388a33de7dc817b073cb97f5d4a8fc964eefa05d3f828d6c812e02
- MD5 2051784c0cb72790272868edf6a99d9b
- SHA1 757e34eb79d017d62ae0ee311c5c0fbd2307f211
- SHA512 5fae78b57ff83fa03eeab4ef0462a26f6827664fa9e98692f3d895a0c8fee0dea552d0c0540a246f173c0c6a9904a5fc56190831702f285641d035d25fdc9e74
- SSDEEP 98304:MWnarh9ERdbLXLKHMarE9lSMyxHsd+OsBh1MJ9gfKaFN:xarhST+HMacd+AJ9YXFN
- TLSH T1B346BF12FA8180B2E5B3413882BAAB7B997DB9301334C5C763E41D7A4D716D17A3E35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
d3d0adb964388a33de7dc817b073cb97f5d4a8fc964eefa05d3f828d6c812e02.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
d3d0adb964388a33de7dc817b073cb97f5d4a8fc964eefa05d3f828d6c812e02.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target d3d0adb964388a33de7dc817b073cb97f5d4a8fc964eefa05d3f828d6c812e02
- Size 5.3MB
- SHA256 d3d0adb964388a33de7dc817b073cb97f5d4a8fc964eefa05d3f828d6c812e02
- MD5 2051784c0cb72790272868edf6a99d9b
- SHA1 757e34eb79d017d62ae0ee311c5c0fbd2307f211
- SHA512 5fae78b57ff83fa03eeab4ef0462a26f6827664fa9e98692f3d895a0c8fee0dea552d0c0540a246f173c0c6a9904a5fc56190831702f285641d035d25fdc9e74
- SSDEEP 98304:MWnarh9ERdbLXLKHMarE9lSMyxHsd+OsBh1MJ9gfKaFN:xarhST+HMacd+AJ9YXFN
- TLSH T1B346BF12FA8180B2E5B3413882BAAB7B997DB9301334C5C763E41D7A4D716D17A3E35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1