General
- Target HiveMind_1_0_0_45.zip
- Size 10.5MB
- Sample260505-pewfmsfs91
- SHA256 9e4d9e7d8d82fed196172408a5848132d71173bbf442c9c7e8ea22d34994ebd1
- MD5 2fdfb07f4ed774ed8a964eef25c9beaa
- SHA1 76461f2b9afa71d46d866da0ca3d484526d25db1
- SHA512 53981ead6a68df99ca489114f2f54d7240ff5b8a8062f34b27a065334ee92c89d58a1b12bd1acc84ce1c8a08f094e86030a7b72db9882e25420fe5b9771238d4
- SSDEEP 196608:iDzbOqKiIjqoukcu+ZhGdFhG7bx8F2IfBy6ma1xTB8jjfehW9RwfCt:4jKcCy8wO1xV8n/HwKt
- TLSH T125B633CB9075DC0B6B116D2249ED8EEA80F7502CD45C7820F6BE2285AD3F6C655FBC98
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
HiveMind_1_0_0_46.msi
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
HiveMind_1_0_0_46.msi
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
setup.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
setup.exe
Resource
win11-20260130-en
Malware Config
Targets
-
- Target HiveMind_1_0_0_46.msi
- Size 11.7MB
- SHA256 63c99b222fae2241a88c8be381f152049c5f60a1be817e52b55693c754a59667
- MD5 851fe5408ceaf904b0bd70659007827a
- SHA1 4e7dd6fe3f622fca0b8ad3b20ad0c56f2902fe10
- SHA512 abf4442ac58791d43274d355840aa4db4bfe8cc717248a2bfa2e090a269e94cf331283a6711e588d66202cc6d1c42b28afa7c3c9dd7b5416609014a426e3de45
- SSDEEP 196608:cu/SFn+UXpsgvQ2pjxdbWNlZ2npEJuqDT+2e0RfZZzDhhlsrYbR6B:pSl+q7jSJyYRfvDhTd6
- TLSH T17AC612EFA4C19175C8477BF5D036A8221573AC245AB850CE16B5FB243A7F283CC6A91F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target setup.exe
- Size 424KB
- SHA256 7a68c7ce3c6b6203a71932318ae0ec5f3b128d6f41b7a35936069b55c3f2ef1c
- MD5 8a5eaa3328250513249c0cf9ea176216
- SHA1 65ee95349ea4aac0054d0bcbfb4a4e714d53143a
- SHA512 3bad47c95034d8946ecfc948c8f13c9f8f379c2caba5e0cd37f4f0c10ccb2c8399c0d8ce926cf0c48baa66e374f73d85403eaabe1ad958dfe96990b06970e757
- SSDEEP 6144:NqIpd/w8ylWKxavR+dJ1oMBClrbMAo+nhmuFfvY0SHZvuD39ojDuUlXjeOg:N7IRWDvFa+nhmuF3Y0sc9eDuUlXCx
- TLSH T15C943A2167E89031F8F326B05ABD62314A7EBCB15F3585DF129026DE89B1AC1ED3075B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.