General
- Target 2026-04-26_087894459346d2b12cb9ea3d9aeb9d54_mespinoza
- Size 980KB
- Sample260426-stdqxshx2v
- SHA256 a9ccf40bb6eda05ec4a025af394763af6dd095d13b17ed736274bf4aa512acf8
- MD5 087894459346d2b12cb9ea3d9aeb9d54
- SHA1 23ee3e8058a13c7a4190c9a0f6be56a36b8ae4eb
- SHA512 b2fe86276626996f8d12ab12d4ae8676b3b6793749301ea8206b9ad1d54c4db52780a7e4285c0a346d0f9e61684d8948e9c8c14d56ce8c06bc4bbda4d6819974
- SSDEEP 24576:/gCDtmAWUUrDi/nPaAi/Rztx6CUCNSeJbgI:ZxGUUrmni/RztxawSaUI
- TLSH T1E625D05B77B04CF6E9628179C992C6A6E3B2BDA61F20D70F16A1835F2F334A16D1D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-26_087894459346d2b12cb9ea3d9aeb9d54_mespinoza.exe
Resource
win10v2004-20260130-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-26_087894459346d2b12cb9ea3d9aeb9d54_mespinoza.exe
Resource
win11-20260130-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-26_087894459346d2b12cb9ea3d9aeb9d54_mespinoza
- Size 980KB
- SHA256 a9ccf40bb6eda05ec4a025af394763af6dd095d13b17ed736274bf4aa512acf8
- MD5 087894459346d2b12cb9ea3d9aeb9d54
- SHA1 23ee3e8058a13c7a4190c9a0f6be56a36b8ae4eb
- SHA512 b2fe86276626996f8d12ab12d4ae8676b3b6793749301ea8206b9ad1d54c4db52780a7e4285c0a346d0f9e61684d8948e9c8c14d56ce8c06bc4bbda4d6819974
- SSDEEP 24576:/gCDtmAWUUrDi/nPaAi/Rztx6CUCNSeJbgI:ZxGUUrmni/RztxawSaUI
- TLSH T1E625D05B77B04CF6E9628179C992C6A6E3B2BDA61F20D70F16A1835F2F334A16D1D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1