General
- Target wininit.exe
- Size 899KB
- Sample261027-3gdkhav19k
- SHA256 8b775dfd147e0d95ba2e9f73b8218dd288aafd4dbdf69961db66799f7433ac61
- MD5 e7d6839cb338967f795939754899c08c
- SHA1 25769430d28d74226569f878e876abb0e1dc1d16
- SHA512 f8187c4d9f8ae2860b184dd5169ba586834aa64c7529cd34d240f4f5bb0c7cfa0b7f970cb83649efc55edc3c8a805e74f79d216782604d55e16f709c2006cb53
- SSDEEP 24576:4xHO462BkfEKEdi6dNmSVr4gkGadC1lLfCvS+K9hEajHZlXiJnVYpb:QOhDgkLdC1lLxtlyJn
- TLSH T1F1159E1AA29902FCD4BBD179DA97990BEA71344D03314ADB13E04AA43F777E0477EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
wininit.exe
Resource
win11-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target wininit.exe
- Size 899KB
- SHA256 8b775dfd147e0d95ba2e9f73b8218dd288aafd4dbdf69961db66799f7433ac61
- MD5 e7d6839cb338967f795939754899c08c
- SHA1 25769430d28d74226569f878e876abb0e1dc1d16
- SHA512 f8187c4d9f8ae2860b184dd5169ba586834aa64c7529cd34d240f4f5bb0c7cfa0b7f970cb83649efc55edc3c8a805e74f79d216782604d55e16f709c2006cb53
- SSDEEP 24576:4xHO462BkfEKEdi6dNmSVr4gkGadC1lLfCvS+K9hEajHZlXiJnVYpb:QOhDgkLdC1lLxtlyJn
- TLSH T1F1159E1AA29902FCD4BBD179DA97990BEA71344D03314ADB13E04AA43F777E0477EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes a file named after a Windows system binary
The file runs from a user directory while carrying the name of an executable that normally only exists in System32.