General
- Target gui_mapper.exe
- Size 173KB
- Sample261027-dp8ceace78
- SHA256 89990fdc6fbe754642924d0ce297ffb23c90e05f974760e4935c8aa7a21888de
- MD5 0a00ef0775fd2b35e5e703c3be6c42bf
- SHA1 837fd12c0fff87c2fe35603bdf860e824d82ef8e
- SHA512 f82bd30bd9499f8110090dc76842df956e3c231aa0148c155da22a1394f997ddf6bdcec993bff7d72504938e1948bfaf9c5ea2c385dab2fc2f0e3dcc8936ee36
- SSDEEP 3072:AJaPQ7+YDuBsiNlopjU9B/mG98E8AD6Wk8ayfRdomJTQSaMm5/6o:po+YDuBsiNlopjU9B/mm5gRxyJNWlx
- TLSH T1BB042B1797A9106DF1B696BCDAB24612DBB1BC411B70E3CF135088990F72BD49E3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
gui_mapper.exe
Resource
win10v2004-20260911-en
5 signatures
300 seconds
Behavioral task
behavioral2
Sample
gui_mapper.exe
Resource
win11ltsc2024-20260911-en
3 signatures
300 seconds
Malware Config
Targets
-
- Target gui_mapper.exe
- Size 173KB
- SHA256 89990fdc6fbe754642924d0ce297ffb23c90e05f974760e4935c8aa7a21888de
- MD5 0a00ef0775fd2b35e5e703c3be6c42bf
- SHA1 837fd12c0fff87c2fe35603bdf860e824d82ef8e
- SHA512 f82bd30bd9499f8110090dc76842df956e3c231aa0148c155da22a1394f997ddf6bdcec993bff7d72504938e1948bfaf9c5ea2c385dab2fc2f0e3dcc8936ee36
- SSDEEP 3072:AJaPQ7+YDuBsiNlopjU9B/mG98E8AD6Wk8ayfRdomJTQSaMm5/6o:po+YDuBsiNlopjU9B/mm5gRxyJNWlx
- TLSH T1BB042B1797A9106DF1B696BCDAB24612DBB1BC411B70E3CF135088990F72BD49E3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1