General
- Target Support-LogMeInRescue.exe
- Size 4.1MB
- Sample261110-pfq8bas1fx
- SHA256 876b9b90b0e88d949122e85fb11541a60978a711adb8f7660d7eb63a481ee05d
- MD5 317bd1901cad273e3169d2255c00c910
- SHA1 911140d195d5309cbcc5ca77c1fc1ae8a8e11e76
- SHA512 f1dbcedfcfd599e4fe029e45a2008043b66ba1d0a9e608ec7c9e018bd7bc468357c92ae12f1230144466e1560d748a158135ae2e0cc4627e28ef5cd166b40cb0
- SSDEEP 98304:LCoRR/Z56MvLdYzxJ7WYlOfebuAXv6ThDzD+reU:LCoRRvzdYzVlOfeR6Th/fU
- TLSH T1931622237A81C233D83618704869ABB61D7EE531CBA404EB73D49E5D663D0E29F3A717
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Support-LogMeInRescue.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
Support-LogMeInRescue.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Support-LogMeInRescue.exe
- Size 4.1MB
- SHA256 876b9b90b0e88d949122e85fb11541a60978a711adb8f7660d7eb63a481ee05d
- MD5 317bd1901cad273e3169d2255c00c910
- SHA1 911140d195d5309cbcc5ca77c1fc1ae8a8e11e76
- SHA512 f1dbcedfcfd599e4fe029e45a2008043b66ba1d0a9e608ec7c9e018bd7bc468357c92ae12f1230144466e1560d748a158135ae2e0cc4627e28ef5cd166b40cb0
- SSDEEP 98304:LCoRR/Z56MvLdYzxJ7WYlOfebuAXv6ThDzD+reU:LCoRRvzdYzVlOfeR6Th/fU
- TLSH T1931622237A81C233D83618704869ABB61D7EE531CBA404EB73D49E5D663D0E29F3A717
- MD5 SHA1 SHA512 SSDEEP TLSH
Adds Run key to start application
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Pre-OS Boot
1Bootkit
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1