General
- Target System32.exe
- Size 315KB
- Sample261104-sds6nssvgv
- SHA256 992c487a889b89688b0ca90c2019dda544587c8b75b03c8eab63df2c5e2e0f4d
- MD5 571894a36b5fe4990581b49f3d310a96
- SHA1 7ab077101ac875d753c70a6dba5fc17b1b43bfdd
- SHA512 ed62bf0d1046a607a7a5ff196b2fa4840cd00d2e7a48944fdd0eb01a38d4df7f54d92d140009f8b0e0294e60c16f10d16c3a49808a7c5fb100c2908b54f73172
- SSDEEP 6144:qdeN1GscP6MMMMMMMMMMMMMMMMMMqk0MMMMMMMMMMMMMMMMMMalv8MvBvwVpoKY:fJMMMMMMMMMMMMMMMMMMqHMMMMMMMMMF
- TLSH T14664C8FA8C882575CD88537FE413A226B1C2484FA2D57A11FF1A1FF51A3B2AC16476C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
System32.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
System32.exe
Resource
win10ltsc2021-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
System32.exe
Resource
win11-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral4
Sample
System32.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target System32.exe
- Size 315KB
- SHA256 992c487a889b89688b0ca90c2019dda544587c8b75b03c8eab63df2c5e2e0f4d
- MD5 571894a36b5fe4990581b49f3d310a96
- SHA1 7ab077101ac875d753c70a6dba5fc17b1b43bfdd
- SHA512 ed62bf0d1046a607a7a5ff196b2fa4840cd00d2e7a48944fdd0eb01a38d4df7f54d92d140009f8b0e0294e60c16f10d16c3a49808a7c5fb100c2908b54f73172
- SSDEEP 6144:qdeN1GscP6MMMMMMMMMMMMMMMMMMqk0MMMMMMMMMMMMMMMMMMalv8MvBvwVpoKY:fJMMMMMMMMMMMMMMMMMMqHMMMMMMMMMF
- TLSH T14664C8FA8C882575CD88537FE413A226B1C2484FA2D57A11FF1A1FF51A3B2AC16476C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Modifies Windows Firewall
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Tasks
static1
Score
3/10
behavioral1
defense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan
Score
10/10
behavioral2
defense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan
Score
10/10
behavioral3
defense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan
Score
10/10
behavioral4
defense_evasiondiscoverynjratpersistenceprivilege_escalationtrojan
Score
10/10