General
- Target xrk_6.24_setup.exe
- Size 20.6MB
- Sample250625-bemlvadm7w
- SHA256 15f7917b2268699bf8f0bfe5d62a3f3ab46527e69d504ee901ecb72a0971ac89
- MD5 6cdacabbac8800c81b7dea07b3f1b137
- SHA1 1f64e5d307bc2f5eaad3ab9946bde359b45eeb0b
- SHA512 34563cb4cfe9d1f91e66d337bc8059103930ced56c7e1bf2c3d79e15d8aeb3e8049214f54baebe30ba488a3651e4e3d356cb9de9ec037c27f16fdd5a65ba195a
- SSDEEP 393216:XKAre2/p3QM8WRRAdy+H+rIlky0G9hGQDhu5OoqmxzXj1mUff2H3scLsy:6b2/Z8kRcH+rIlkBG7DDw5xqUzzkwq3s
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Targets
-
- Target xrk_6.24_setup.exe
- Size 20.6MB
- SHA256 15f7917b2268699bf8f0bfe5d62a3f3ab46527e69d504ee901ecb72a0971ac89
- MD5 6cdacabbac8800c81b7dea07b3f1b137
- SHA1 1f64e5d307bc2f5eaad3ab9946bde359b45eeb0b
- SHA512 34563cb4cfe9d1f91e66d337bc8059103930ced56c7e1bf2c3d79e15d8aeb3e8049214f54baebe30ba488a3651e4e3d356cb9de9ec037c27f16fdd5a65ba195a
- SSDEEP 393216:XKAre2/p3QM8WRRAdy+H+rIlky0G9hGQDhu5OoqmxzXj1mUff2H3scLsy:6b2/Z8kRcH+rIlkBG7DDw5xqUzzkwq3s
- MD5 SHA1 SHA512 SSDEEP
-
Loads dropped DLL
-
Blocklisted process makes network request
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.