General
- Target Lynx-Free.7z
- Size 328.3MB
- Sample261107-vb2fdaet8p
- SHA256 ec70c24a8ac0842c3b0b4a360281dda82d81973b3fc7d2a3b317d0296efffccf
- MD5 f3ed7c9d29416018a33c2914dab50c5e
- SHA1 dc20dabfadce6f9082b7394480619341b04bde7e
- SHA512 f765006478508acc88e754f4924ce0e023d7c5d92fa7885e34302b6b48b361ec030f6e988dbafd79e12fc898771634d3e60a2a4ac2271cc9e7fae8b9386abd0a
- SSDEEP 6291456:GjUwSCHiGOsY+OHUIGMHLxQEsucYSu5xbdr+t3q597Yqyt8Ri:trbsX51UqtYZd+t3GXfo
- TLSH T14DF833987475490800D45BBDAA79BA3133B0F37A079F295D33965DEB4A23F309B1A723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Lynx-Free.7z
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Lynx-Free.7z
Resource
win11ltsc2024-20260911-en
26 signatures
150 seconds
Malware Config
Targets
-
- Target Lynx-Free.7z
- Size 328.3MB
- SHA256 ec70c24a8ac0842c3b0b4a360281dda82d81973b3fc7d2a3b317d0296efffccf
- MD5 f3ed7c9d29416018a33c2914dab50c5e
- SHA1 dc20dabfadce6f9082b7394480619341b04bde7e
- SHA512 f765006478508acc88e754f4924ce0e023d7c5d92fa7885e34302b6b48b361ec030f6e988dbafd79e12fc898771634d3e60a2a4ac2271cc9e7fae8b9386abd0a
- SSDEEP 6291456:GjUwSCHiGOsY+OHUIGMHLxQEsucYSu5xbdr+t3q597Yqyt8Ri:trbsX51UqtYZd+t3GXfo
- TLSH T14DF833987475490800D45BBDAA79BA3133B0F37A079F295D33965DEB4A23F309B1A723
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Loads dropped DLL
Modifies file permissions
Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Checks whether UAC is enabled
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
File and Directory Permissions Modification
1Hide Artifacts
1Ignore Process Interrupts
1Modify Registry
1