General
- Target DRHG346H362.exe
- Size 54.8MB
- Sample250607-spr3raxpz7
- SHA256 0e04c54263dcd8deeab60c7f6f7d7223ccef8b72df707dc87557c6f5ce09b999
- MD5 7df7580919d92dbbae94db27530e62db
- SHA1 ceff674be34d5142ed20973b66e22a39304af791
- SHA512 dd3098fc4d389f5764f97173e59df3828413c24a6b7236aad24ec9a0ecfe283da4b6e27e311c7206fa1f9fb51cc1c24fc364e63f084800abd63efa5adeafd84e
- SSDEEP 1572864:lImt6mc2UTdUKujCPVb/hJDEpR9qf+aDfAeSPfNjWk:WmLvlEPh/hJ69U+QAe25Wk
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DRHG346H362.exe
Resource
win10v2004-20250502-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target DRHG346H362.exe
- Size 54.8MB
- SHA256 0e04c54263dcd8deeab60c7f6f7d7223ccef8b72df707dc87557c6f5ce09b999
- MD5 7df7580919d92dbbae94db27530e62db
- SHA1 ceff674be34d5142ed20973b66e22a39304af791
- SHA512 dd3098fc4d389f5764f97173e59df3828413c24a6b7236aad24ec9a0ecfe283da4b6e27e311c7206fa1f9fb51cc1c24fc364e63f084800abd63efa5adeafd84e
- SSDEEP 1572864:lImt6mc2UTdUKujCPVb/hJDEpR9qf+aDfAeSPfNjWk:WmLvlEPh/hJ69U+QAe25Wk
- MD5 SHA1 SHA512 SSDEEP
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Loads dropped DLL