General
- Target 61d41aaeff978386e11001d79f57e503.exe
- Size 1.8MB
- Sample261102-jpb7vs1yf1
- SHA256 49e3c2ccfe72dfe8eee240ced76a90983b1859b0126669c63a8cf12c52200eb9
- MD5 61d41aaeff978386e11001d79f57e503
- SHA1 99ca185109eb6ddc3aa10b2bf7c8736f5cee68bf
- SHA512 a8779429c46a422b6ba989f7827b4d91e5b0c72948b98d89e0dc4d93158b3e5a0fa96d3473b904c24ce99393f492a4e3af5388ed91a59d275ac2fb2069eefad1
- SSDEEP 49152:meQLWJMxmnfEDDir7gZSHg8n8idST+K/SQ5sDrGSoPKWvquwCPH6IR7IPqti:fQLWFfLuxUKq
- TLSH T19B85232037FC4DC4D4A640773C918641AA77FEE02B949AAB13E077CA6D332D21D6B7A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
61d41aaeff978386e11001d79f57e503.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
61d41aaeff978386e11001d79f57e503.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 61d41aaeff978386e11001d79f57e503.exe
- Size 1.8MB
- SHA256 49e3c2ccfe72dfe8eee240ced76a90983b1859b0126669c63a8cf12c52200eb9
- MD5 61d41aaeff978386e11001d79f57e503
- SHA1 99ca185109eb6ddc3aa10b2bf7c8736f5cee68bf
- SHA512 a8779429c46a422b6ba989f7827b4d91e5b0c72948b98d89e0dc4d93158b3e5a0fa96d3473b904c24ce99393f492a4e3af5388ed91a59d275ac2fb2069eefad1
- SSDEEP 49152:meQLWJMxmnfEDDir7gZSHg8n8idST+K/SQ5sDrGSoPKWvquwCPH6IR7IPqti:fQLWFfLuxUKq
- TLSH T19B85232037FC4DC4D4A640773C918641AA77FEE02B949AAB13E077CA6D332D21D6B7A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes a file named after a Windows system binary
The file runs from a user directory while carrying the name of an executable that normally only exists in System32.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1