General
- Target VwoBWXuFGJ9uAOPEzm6.exe
- Size 25.7MB
- Sample260528-2cv4bady3m
- SHA256 4457d589d33c2a63ea0045e7b0b29a53307510832abceddb8d5fb950fcc3fcc1
- MD5 3d7e6043f7dc9fe852c658862e383270
- SHA1 c842c1a91c8cdb8e5a167a748beadae08ec4dcb4
- SHA512 9cc215a5dc1ad3dc93c0d030e976c60ead7f7a86a78b3ff209ad27b0006e66b28db26e4a227dde88298038e2eea00c1804356690acfa78ff2a844cea7739866a
- SSDEEP 393216:GVjelELnOAcwyVj4/H6LTY+G+it5GkefAtCI2v9cPiolmQVnlAeNB:GVjN9ukHoTY+atQYCLv963lFVnlA
- TLSH T1CF4733C625B945BCCA928334D9852BFDD5DC3859ACF9942FBF8B19123635C58CCEA032
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VwoBWXuFGJ9uAOPEzm6.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
VwoBWXuFGJ9uAOPEzm6.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target VwoBWXuFGJ9uAOPEzm6.exe
- Size 25.7MB
- SHA256 4457d589d33c2a63ea0045e7b0b29a53307510832abceddb8d5fb950fcc3fcc1
- MD5 3d7e6043f7dc9fe852c658862e383270
- SHA1 c842c1a91c8cdb8e5a167a748beadae08ec4dcb4
- SHA512 9cc215a5dc1ad3dc93c0d030e976c60ead7f7a86a78b3ff209ad27b0006e66b28db26e4a227dde88298038e2eea00c1804356690acfa78ff2a844cea7739866a
- SSDEEP 393216:GVjelELnOAcwyVj4/H6LTY+G+it5GkefAtCI2v9cPiolmQVnlAeNB:GVjN9ukHoTY+atQYCLv963lFVnlA
- TLSH T1CF4733C625B945BCCA928334D9852BFDD5DC3859ACF9942FBF8B19123635C58CCEA032
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
Suspicious use of NtSetInformationThreadHideFromDebugger