General
- Target hwid_ui.exe
- Size 531KB
- Sample261027-24ekmsgw6t
- SHA256 fa47f2c0612d0c05db6b599211b3e1c9d6ffcad4111d6da3f85800a4ef9fca7a
- MD5 918fc646181658f5293564e98fe18597
- SHA1 20395eec109d0a5be9b8524a85fb8cca07eba5b5
- SHA512 2489fb433809d4a7935d678fc366d5831de16ac31a510c26ee73d510ecfe6ef1f62fc09d967011530ee2ee3f5e4fe837526af08517578a7d88449db26b7cdb44
- SSDEEP 6144:DVUQbSlMpOTakBjtE0mO3ml4Lr52YMdRzH1kUpJhx9Hkx1WlDYiRdP05gu:WLBKuVUh1RJzRawtYiRdP
- TLSH T14FC47D66A7A403F8E1B7D178CEA24902E771784A07B19ADF03A049765F277E14E3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
hwid_ui.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
hwid_ui.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target hwid_ui.exe
- Size 531KB
- SHA256 fa47f2c0612d0c05db6b599211b3e1c9d6ffcad4111d6da3f85800a4ef9fca7a
- MD5 918fc646181658f5293564e98fe18597
- SHA1 20395eec109d0a5be9b8524a85fb8cca07eba5b5
- SHA512 2489fb433809d4a7935d678fc366d5831de16ac31a510c26ee73d510ecfe6ef1f62fc09d967011530ee2ee3f5e4fe837526af08517578a7d88449db26b7cdb44
- SSDEEP 6144:DVUQbSlMpOTakBjtE0mO3ml4Lr52YMdRzH1kUpJhx9Hkx1WlDYiRdP05gu:WLBKuVUh1RJzRawtYiRdP
- TLSH T14FC47D66A7A403F8E1B7D178CEA24902E771784A07B19ADF03A049765F277E14E3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1