General
- Target dropper_clean.exe
- Size 18KB
- Sample261029-vqdmvsds8s
- SHA256 32972ff3a1f98ca5672e44c127650b53be4bd819f4fb420077da6ace5325b74a
- MD5 2dfa636cef630e49b249019e4a8b38cd
- SHA1 9a03c2341684c2f9f8504f4112234e4ac10f0be6
- SHA512 4f9540cac37c0f7b6745c01a0367b467d5110206badcbf3c1470a3beb0ec2cbcc91e8604a4c98b8976dd3cd83ddbd4d7765f10427ba7ddbd5994fd134e712871
- SSDEEP 192:J4dsifQIVSZF9gwC0Kdv5vgYBAVqolWZHrUqvrnaHggJS/KwM6:kfQIVsFCHhvgYcrAZHrlrGSiK
- TLSH T14D82F6465A8716EDF929D23E89218632E561FA011F3295FF8312E2340DB1FE15F3DAC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dropper_clean.exe
Resource
win10v2004-20260911-en
7 signatures
900 seconds
Behavioral task
behavioral2
Sample
dropper_clean.exe
Resource
win11ltsc2024-20260911-en
6 signatures
900 seconds
Malware Config
Targets
-
- Target dropper_clean.exe
- Size 18KB
- SHA256 32972ff3a1f98ca5672e44c127650b53be4bd819f4fb420077da6ace5325b74a
- MD5 2dfa636cef630e49b249019e4a8b38cd
- SHA1 9a03c2341684c2f9f8504f4112234e4ac10f0be6
- SHA512 4f9540cac37c0f7b6745c01a0367b467d5110206badcbf3c1470a3beb0ec2cbcc91e8604a4c98b8976dd3cd83ddbd4d7765f10427ba7ddbd5994fd134e712871
- SSDEEP 192:J4dsifQIVSZF9gwC0Kdv5vgYBAVqolWZHrUqvrnaHggJS/KwM6:kfQIVsFCHhvgYcrAZHrlrGSiK
- TLSH T14D82F6465A8716EDF929D23E89218632E561FA011F3295FF8312E2340DB1FE15F3DAC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1