General
- Target f_00213d.zip
- Size 11.0MB
- Sample260505-ph7cbafw7v
- SHA256 3dceda8b88aaa47811f91234b75ace320aaafbd3f28bc320bf5aaae779e42149
- MD5 f5403780899ffb67def4f59b655ddb0b
- SHA1 f72c899c74a924a507425c92cd5438873e441776
- SHA512 07d8d5cbfca27029bdb9ea8d58095da225fe10888be2a1a41b70be8a8694fd4a0b5cb84a9c6a1da8fc645fccb5f17d47302b909fc060032dfd34c0e54331afcd
- SSDEEP 196608:3fC+UPf9RjUi6/ucFhAKfC5/aOPXYsAhvm3W93nQKNAB1lk1SIDhjQ4IiOg3ztLK:a+ElRIi6V5fC5/DYsAhgW93t0Av04AgM
- TLSH T16AC633224A3DB5D659AB6B51B108C0FFD8850B8CDDED71991AA44ECF0B13BB06CB9C81
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f_00213d.msi
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
f_00213d.msi
Resource
win11-20260130-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target f_00213d
- Size 11.2MB
- SHA256 82131ae0fb57dbea5ab8d1b67c67408e0fdf6b5b5c9136e7061aebaba7a4bc1b
- MD5 c842dd759142abcf3c70e1c0d3ec78ac
- SHA1 9571f3d899e4abb3e4ec9a0d37038f5bcaf456b1
- SHA512 221341732424eb756e32c0b20f0255201c88932e7a7b7e7528f351dd0ba14a20086880fe60a9c53465c8f43b77722825ab22f20bd2172badd110a78cf5dc8575
- SSDEEP 196608:hK2MDSoZjsdZ+5YocQgoIfVisODIrJmhc8C73ipUfQwA8X/j8+QkFTa1E5a:h1yJjW+5jgoINdOsruc8CDnQ0PA+3IE5
- TLSH T169C63397FE481A22E1380DBE8C7253145379AE889B06145F33D9356DD6F36C42EB2EE4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2System Binary Proxy Execution
1Msiexec
1