General
- Target 2026-04-15_2ad2091af0a87bd224befab99ed07b31_mespinoza
- Size 1.3MB
- Sample260415-rfjvcabs5z
- SHA256 f214dd44d0ba62e17eec2d22c2b4bf840941f0dd0d2e35295e85108317689384
- MD5 2ad2091af0a87bd224befab99ed07b31
- SHA1 d6a99b4e281b5c07a2bf3974a2b0e34e251ac7a7
- SHA512 5e6c989a7a46bf82fdcb35122171a9d40e11ffb1dbc02b9446cd07b35371a9e477db5939d7e64de2924885accad773d9bf62cf3dcc921c0f342a925b02d21d43
- SSDEEP 12288:+VfhxbitwzLq34XiPvrLr0Ci41UO5wHPdjIpTEx/Mz0gLeAfsVyqBn9r2ilY:YbAwhSnnrFb4PM4MYgLxEVyGL6
- TLSH T16F5502AF77B454F6C56AC1B0C4AAA7A4E772FC55AC21A30F2750A31F2F376946C24321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_2ad2091af0a87bd224befab99ed07b31_mespinoza.exe
Resource
win10v2004-20260130-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_2ad2091af0a87bd224befab99ed07b31_mespinoza.exe
Resource
win11-20260130-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_2ad2091af0a87bd224befab99ed07b31_mespinoza
- Size 1.3MB
- SHA256 f214dd44d0ba62e17eec2d22c2b4bf840941f0dd0d2e35295e85108317689384
- MD5 2ad2091af0a87bd224befab99ed07b31
- SHA1 d6a99b4e281b5c07a2bf3974a2b0e34e251ac7a7
- SHA512 5e6c989a7a46bf82fdcb35122171a9d40e11ffb1dbc02b9446cd07b35371a9e477db5939d7e64de2924885accad773d9bf62cf3dcc921c0f342a925b02d21d43
- SSDEEP 12288:+VfhxbitwzLq34XiPvrLr0Ci41UO5wHPdjIpTEx/Mz0gLeAfsVyqBn9r2ilY:YbAwhSnnrFb4PM4MYgLxEVyGL6
- TLSH T16F5502AF77B454F6C56AC1B0C4AAA7A4E772FC55AC21A30F2750A31F2F376946C24321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1