General
- Target DeaD.exe
- Size 29.1MB
- Sample261107-tkbqmsd13q
- SHA256 3eacc8f4a8161b54bb6468825c522aabccb29be2ac809402c1a93d8277509a3d
- MD5 252234f934c7dbc7bc76c1850b0fe294
- SHA1 ac575effe1d3434346097c2bc849fe1d8ed456ea
- SHA512 1ca99c3f4ced4131a6ce0ad3bc14e2377faa23d693554750e800bb850ac42257d7bbe0952670d87e0ccee40fd3256420569eb46687c0b29043b77d358436b11a
- SSDEEP 786432:9pLRvjXoRldWzZYcW8/nGCnkt0fkhanHTvPulIPOi2nRxelxBqaMNdpFf:9pRWgnGCnktFmHTvzjP8Ndp1
- TLSH T15A6733A43AC520F1F4C6473AD8D510B2FBF5B5A61726C08BAAE685211F331E5FE2C719
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
DeaD.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
DeaD.exe
Resource
win11ltsc2024-20260911-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target DeaD.exe
- Size 29.1MB
- SHA256 3eacc8f4a8161b54bb6468825c522aabccb29be2ac809402c1a93d8277509a3d
- MD5 252234f934c7dbc7bc76c1850b0fe294
- SHA1 ac575effe1d3434346097c2bc849fe1d8ed456ea
- SHA512 1ca99c3f4ced4131a6ce0ad3bc14e2377faa23d693554750e800bb850ac42257d7bbe0952670d87e0ccee40fd3256420569eb46687c0b29043b77d358436b11a
- SSDEEP 786432:9pLRvjXoRldWzZYcW8/nGCnkt0fkhanHTvPulIPOi2nRxelxBqaMNdpFf:9pRWgnGCnktFmHTvzjP8Ndp1
- TLSH T15A6733A43AC520F1F4C6473AD8D510B2FBF5B5A61726C08BAAE685211F331E5FE2C719
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Loads dropped DLL
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Accessibility Features
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Accessibility Features
1