General
- Target saiko.exe
- Size 12.3MB
- Sample261030-ejgsyaav5k
- SHA256 b7c9bb8af9128ed9f61e956f061ca66bd4fad4e78ee042a54bf0f22deca42e72
- MD5 a2347e98c331e577f3abcc463c3ac68b
- SHA1 41380d891fbd2c0f8c9a24423a0c52c34b597854
- SHA512 1df4c0674c0e7acda8a120de4423aaafb875de69f2dbb13906361154a9eb788d54004057c56d7e42ae1e4aa0f693ca09baac766f70f86818b03e3a714c4c5448
- SSDEEP 196608:KowcgHiwFC20Z6jd1EEarb6ybQK0lsjk/J6+f/u246j9RzjeU5UbkLRHd:fEiwsx2YEm6y4lsjg4+f/h42jB57RHd
- TLSH T15DD6CF07F25190B8C05EC3B5975F9632EA72B88D052471BA57F86B212F7BE102B2D79C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
saiko.exe
Resource
win11-20260911-en
26 signatures
600 seconds
Malware Config
Targets
-
- Target saiko.exe
- Size 12.3MB
- SHA256 b7c9bb8af9128ed9f61e956f061ca66bd4fad4e78ee042a54bf0f22deca42e72
- MD5 a2347e98c331e577f3abcc463c3ac68b
- SHA1 41380d891fbd2c0f8c9a24423a0c52c34b597854
- SHA512 1df4c0674c0e7acda8a120de4423aaafb875de69f2dbb13906361154a9eb788d54004057c56d7e42ae1e4aa0f693ca09baac766f70f86818b03e3a714c4c5448
- SSDEEP 196608:KowcgHiwFC20Z6jd1EEarb6ybQK0lsjk/J6+f/u246j9RzjeU5UbkLRHd:fEiwsx2YEm6y4lsjg4+f/h42jB57RHd
- TLSH T15DD6CF07F25190B8C05EC3B5975F9632EA72B88D052471BA57F86B212F7BE102B2D79C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Discovery
Browser Information Discovery
1Debugger Evasion
1Network Service Discovery
1Network Share Discovery
1Peripheral Device Discovery
1Query Registry
3System Information Discovery
5System Network Configuration Discovery
1System Time Discovery
1