General
- Target fas2lsp.rar
- Size 533KB
- Sample260529-rxhcvae19l
- SHA256 0f85999ec6396aee4a1355b60caa1dc6e9adba1e46915d7bbd53ce28e2906f1d
- MD5 241cec2b4a2d676949e71238b728d9a3
- SHA1 5504de838714c227e0fcf8eb0215f4cea48948f7
- SHA512 f3d9fd643cb49af96fec9ee2512137ca587553d895f3ec69803ab02b89132151dae4249f158051cb96975f3c028bb7cd25b20a97ad1475bee45b19f0871f1625
- SSDEEP 12288:nd47RCi47+szq23e+DOqyXyQd1TV9ByBqDmzfRYbm:d4dx4m+GXyQLTz7mz5
- TLSH T143C4234833333E259CC2E0059A6F4B971566BA60FCB51C8978752C32914ADE39B2DB7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fas2lsp.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target fas2lsp.exe
- Size 969KB
- SHA256 5427ccadb45a2d13d73b0b868311f71639f0e5e5d8ea613a235492c53b2752b7
- MD5 b11f932a786da9d44ee31abc0f92aa7a
- SHA1 6a3881056914da405426b126edb0e66a8a392374
- SHA512 05c0295d5400996e1cf83b5873223ee20c698031f562f2705596ad2b294db6efe140ce02b007af8be98a8e46ad8ed75c0d845011ab26a5c89c8e03c9a0ff50e5
- SSDEEP 12288:UVF98VgifPrtI+1PCJ4orfzl7//c55tR78PlAYzqiTsv+ck8xSMrdHxP:fgifZfm7z9/055T78Plj24GZSMRx
- TLSH T1A025D081B682C571C0BF0A720531E21DB37414258765EEDFAFC561E83F736C1A93DAAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.