General
- Target 2026-05-04_50bda7cca354fb20015559088b7a5f39_mespinoza
- Size 1.6MB
- Sample260504-vs4basf14z
- SHA256 0c9cb932bcc4091ab36095cb909af1440ace1821fd8f527067794096855a12ee
- MD5 50bda7cca354fb20015559088b7a5f39
- SHA1 215d0b1c10a02aa4b92ac42b4a1b3689a0f51db2
- SHA512 dd2a764aad4d4dc20e2616029dfe85577a1792d959271b6dd4bea680867e46ed61f8dc4c61a26b30c666e090a5980da3fa4a0324b5b990e31e7a45256d7bfb3e
- SSDEEP 12288:QVNhxbitwzLi45Oz7KjwMdXrcxyXSA/cbnTc+ADcce1YGRk2:4bAwRYz7KEMdX6keYnAcer3
- TLSH T1C875025FB77049F2E45AC17AE9A697A0E7B2FC8A2D20930F1754E30E2F3B6A05D14351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-04_50bda7cca354fb20015559088b7a5f39_mespinoza.exe
Resource
win10v2004-20260130-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_50bda7cca354fb20015559088b7a5f39_mespinoza.exe
Resource
win11-20260130-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_50bda7cca354fb20015559088b7a5f39_mespinoza
- Size 1.6MB
- SHA256 0c9cb932bcc4091ab36095cb909af1440ace1821fd8f527067794096855a12ee
- MD5 50bda7cca354fb20015559088b7a5f39
- SHA1 215d0b1c10a02aa4b92ac42b4a1b3689a0f51db2
- SHA512 dd2a764aad4d4dc20e2616029dfe85577a1792d959271b6dd4bea680867e46ed61f8dc4c61a26b30c666e090a5980da3fa4a0324b5b990e31e7a45256d7bfb3e
- SSDEEP 12288:QVNhxbitwzLi45Oz7KjwMdXrcxyXSA/cbnTc+ADcce1YGRk2:4bAwRYz7KEMdX6keYnAcer3
- TLSH T1C875025FB77049F2E45AC17AE9A697A0E7B2FC8A2D20930F1754E30E2F3B6A05D14351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1