General
-
Target
046b313759086c63638af6e7a6d9786c701ccc131e5b6724e1f9b53a47e604f8
-
Size
228KB
-
Sample
221125-mf75qaad54
-
MD5
a6fb1262525f863430735b4d0def9f98
-
SHA1
25f4bbc41f8b3e6d10b583a756ebe5b94c4759b7
-
SHA256
046b313759086c63638af6e7a6d9786c701ccc131e5b6724e1f9b53a47e604f8
-
SHA512
68d86a91f0a16fe58b3c61fb4e9c076e9dbc002a5b6005559d09fcc7ffe2271aa5d05f840573114734f3227a583bd77dd973aa32e8c3cc8eb0d87373bcd348b1
-
SSDEEP
3072:y0L6J2yckO/k0FpvZDJ47ZA39SiryydT4lh:nL/k0FpdJ+A3nyqU
Static task
static1
Behavioral task
behavioral1
Sample
046b313759086c63638af6e7a6d9786c701ccc131e5b6724e1f9b53a47e604f8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
046b313759086c63638af6e7a6d9786c701ccc131e5b6724e1f9b53a47e604f8.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
046b313759086c63638af6e7a6d9786c701ccc131e5b6724e1f9b53a47e604f8
-
Size
228KB
-
MD5
a6fb1262525f863430735b4d0def9f98
-
SHA1
25f4bbc41f8b3e6d10b583a756ebe5b94c4759b7
-
SHA256
046b313759086c63638af6e7a6d9786c701ccc131e5b6724e1f9b53a47e604f8
-
SHA512
68d86a91f0a16fe58b3c61fb4e9c076e9dbc002a5b6005559d09fcc7ffe2271aa5d05f840573114734f3227a583bd77dd973aa32e8c3cc8eb0d87373bcd348b1
-
SSDEEP
3072:y0L6J2yckO/k0FpvZDJ47ZA39SiryydT4lh:nL/k0FpdJ+A3nyqU
Score9/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of SetThreadContext
-