General
- Target bpp.zip
- Size 92.3MB
- Sample260429-l2d84aev3k
- SHA256 017d87bd080eb4714414ffb0b87b6f142ca5bd2dfc7cf05d163be952ba18202d
- MD5 b0bc47a7308bd39a5b638781874a3d8e
- SHA1 2c11e130bebc8eef1e8954f9d514260b20f8019c
- SHA512 8f5331578df6e6570f97d40122fafbe2a219eb7b9397eb3d90bab38ef45110d1acf352ac07a3850ad57c65ebe8730dddedc11c5bf3d536aee730ec98df99285d
- SSDEEP 1572864:I1GBPY1Sc++ZrHREQxPIzZyHSML+zVmIzibBmSWMPfMXVjbTXN2cbtrMapYCv5r4:IYBgDTZLREYPqIAzVmIziNTWMHG9HXNk
- TLSH T1D2283333B4947D08CE65AFF1E0CFEB68653C9A713533E982113E875917C92C9BA9940E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Microsoft_VC142_CRT_x64.msi
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
Microsoft_VC142_CRT_x64.msi
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
seafile-applet.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
seafile-applet.exe
Resource
win11-20260130-en
Malware Config
Targets
-
- Target Microsoft_VC142_CRT_x64.msm
- Size 1.2MB
- SHA256 0229c53b9a6162308846bba0fb7d3e692bf82d78d8f5c96d8b7794ef4f44b7f4
- MD5 c3ff95a74f462e5ca67df833be178bbb
- SHA1 6c106a828fb09139f22a74a9e1ff603843f208ec
- SHA512 f7bc6fda53e7b42052606af516093b30c34aedcaeda7835dff40a18c21f76ccb936de5f17803b6dc79624965c6fca3b63f995eca70cb3cdd5f80bf02d66611b1
- SSDEEP 24576:YsN0Z7das2plqMzlvb9oruGL/N6YOOfTRgPVgXIpf/0TOGCQTPr+PaA72an3JpfF:9I7das2plnzOua/NoOfO9gAkPrsaAZJ7
- TLSH T1D24523123A565B91DE87E6BC2AB78F915B0DEDCCD8CBF1425F5832AD36F01C4B482528
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target seafile-applet.exe
- Size 6.4MB
- SHA256 75a3dea324bc49142f2780124ae6862af76de19e847c2e81894718e43fa08715
- MD5 a6a233f3983ed7a78b5cc08bd889f834
- SHA1 10b60807dd0948d09abe80b5d4823efc406bce72
- SHA512 484365938246554c650821072cee90307ef89baeb6436aa237e50f9e5fe7c4097f99752ddebd37a8883c4a55fc7055faca6e9aac00b8f7ba816a21de5e433fad
- SSDEEP 49152:3KNSE66zlCq7sB2poWn7rR+5E/8S1jJMbMeKFwmP4ywMMCq9+3uiO0j57Uhf1Gum:76VUhf1GuZqJ5zV
- TLSH T1BA66070BA77951D1D4BAC43DD1536A3FFC3138AA836057D3A646EB160B267E4AE3E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Installer Packages
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Installer Packages
1