General
- Target Noro Free.exe
- Size 4.6MB
- Sample261102-ljtk3aaz4j
- SHA256 8510981131a905b9ae53ec1f1e0fb296e5aa7793d29a0747c5dbbd74ca3ec1b0
- MD5 ed10ce12ab46d5ad24fbdee00ef935b0
- SHA1 493b7a7c6251bad8b7e564aa92d42151398c591c
- SHA512 5d330b7cdcfbc2daec1f2456d9525fc740b60e7347420bebe233e3c4e63d873a22324ec48d40376132298172c99be1a38168c7d1a016a33cc506db004cc475f1
- SSDEEP 98304:00jU6157b81lZUGB2E+Q2Ld+Skl/wFQs2rBs3ZPp:aS5mP2lLrFp2rBs3ZP
- TLSH T1A236D02BF2A921E8D177D07DC55A8B1BEA71740947204ADB13D441A82F27BE45FBFB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Noro Free.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Noro Free.exe
- Size 4.6MB
- SHA256 8510981131a905b9ae53ec1f1e0fb296e5aa7793d29a0747c5dbbd74ca3ec1b0
- MD5 ed10ce12ab46d5ad24fbdee00ef935b0
- SHA1 493b7a7c6251bad8b7e564aa92d42151398c591c
- SHA512 5d330b7cdcfbc2daec1f2456d9525fc740b60e7347420bebe233e3c4e63d873a22324ec48d40376132298172c99be1a38168c7d1a016a33cc506db004cc475f1
- SSDEEP 98304:00jU6157b81lZUGB2E+Q2Ld+Skl/wFQs2rBs3ZPp:aS5mP2lLrFp2rBs3ZP
- TLSH T1A236D02BF2A921E8D177D07DC55A8B1BEA71740947204ADB13D441A82F27BE45FBFB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1