General
- Target WindowsSecurityUpdate.exe
- Size 20.4MB
- Sample261102-ezheeag16p
- SHA256 b2554e082276071647b40d6aa202a8917540836258897f5fde0b999b01ddacb0
- MD5 c165b0f376bc13fba4b1de93dd273166
- SHA1 9844021b16328f9eb2c6afd65c26137659c1c0f5
- SHA512 f4bd92d165bd90cecfd3872d307b056681f45cfc7c39d3aee17cbb076ac393026ab48131cd0552490b123de3597f1c54b25beac26b4166eae41aff6256c270c6
- SSDEEP 393216:Nuuq99iIN9hsWLo23m4Js9yjPZE34JaAMnDZxOKW9zCuRa3FdoGfLr52pMY:NuuqLR3Lo23mMd+O9QNIBzHRaVvfLtY
- TLSH T18B2733C4C66200D7E8C9A23D98F69419D7B0718B97B0C1EF265492E63FE7DC25E74B82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
WindowsSecurityUpdate.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
WindowsSecurityUpdate.exe
Resource
win10ltsc2021-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
WindowsSecurityUpdate.exe
Resource
win11-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
WindowsSecurityUpdate.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target WindowsSecurityUpdate.exe
- Size 20.4MB
- SHA256 b2554e082276071647b40d6aa202a8917540836258897f5fde0b999b01ddacb0
- MD5 c165b0f376bc13fba4b1de93dd273166
- SHA1 9844021b16328f9eb2c6afd65c26137659c1c0f5
- SHA512 f4bd92d165bd90cecfd3872d307b056681f45cfc7c39d3aee17cbb076ac393026ab48131cd0552490b123de3597f1c54b25beac26b4166eae41aff6256c270c6
- SSDEEP 393216:Nuuq99iIN9hsWLo23m4Js9yjPZE34JaAMnDZxOKW9zCuRa3FdoGfLr52pMY:NuuqLR3Lo23mMd+O9QNIBzHRaVvfLtY
- TLSH T18B2733C4C66200D7E8C9A23D98F69419D7B0718B97B0C1EF265492E63FE7DC25E74B82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1