General
- Target satellitestress_token_1794078300445.txt
- Size 607B
- Sample261107-17zvbavyhx
- SHA256 17d098ce854e56e25466fd86f6517cf1c230ec99916a8737e402c61633f6d495
- MD5 7a964a935aad4489be29d5012262aacd
- SHA1 698e6eda125d8115137db774b843b1bf684acbaf
- SHA512 715e6459fa933fe6460f034ef97a26a23058a13676d2fdf0055e87dbe98041e99ef6e9d6825b2afe250ff801c32dbe8df630404c88f7bce0abc43ee520dfefe8
- TLSH T135F02654825768A586AFCAA25C90EE513143BC46D56F3620791CA3D99A227AC0CFEC0F
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
satellitestress_token_1794078300445.txt
Resource
win10v2004-20260911-en
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
satellitestress_token_1794078300445.txt
Resource
win11ltsc2024-20260911-en
25 signatures
900 seconds
Malware Config
Targets
-
- Target satellitestress_token_1794078300445.txt
- Size 607B
- SHA256 17d098ce854e56e25466fd86f6517cf1c230ec99916a8737e402c61633f6d495
- MD5 7a964a935aad4489be29d5012262aacd
- SHA1 698e6eda125d8115137db774b843b1bf684acbaf
- SHA512 715e6459fa933fe6460f034ef97a26a23058a13676d2fdf0055e87dbe98041e99ef6e9d6825b2afe250ff801c32dbe8df630404c88f7bce0abc43ee520dfefe8
- TLSH T135F02654825768A586AFCAA25C90EE513143BC46D56F3620791CA3D99A227AC0CFEC0F
- MD5 SHA1 SHA512 TLSH
Adds Run key to start application
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1