General
- Target Release1.3.15.zip
- Size 1.3MB
- Sample260604-ngfbrses2q
- SHA256 3c1cfbe70d28d9e559f07161cf7f320bef48a60f12f701115bc90643a73f8286
- MD5 c4a5ec74619874f30ca228d752bd6a25
- SHA1 02ea266fad591671a6161da307126950a6421694
- SHA512 393b1494c83735d382d38df5dd92da3e20ebecb4106b36cfaa3a4f53f0e7082c4c60b8356286262edcfccbedbf42b107e3bd2b0473112fbd227a273bf8835ec6
- SSDEEP 24576:JAo0FpZId/OW4Mc8h1izaw0tV+6DhetfKnGAcPhetH08Kxbcz1EsO6pRmr:JE8WlMtfizvk54tyG1etCc7Ob
- TLSH T1BC553378FC8D36B0EEA17C3A734A9651337504FD001EAF6695CDBB6161CB67C8C5025A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Drift.exe
Resource
win10ltsc2021-20260513-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target Drift.exe
- Size 1.4MB
- SHA256 8ebdc43841111f569d5ed13fec5267ca4f0388c8652fc17652c9140d7b47c263
- MD5 45ca111a41a763448d4cf7009b4741d1
- SHA1 09e9520bd8d27b0aa8d9af83b79262c2f9088afa
- SHA512 329d726148ba6f57be56e4af3c1872fc56563e5f869f863f09ac03b502f3d20a741586cf65800a27c1f13ca0dd49f02baacc8715ad0161dfdc96f0100dff946c
- SSDEEP 24576:JHb8yRljutW0U0B8zaZCs0SkbY76z5Q3owCok7OWiRvUl06litbSrNh41:FXjm8z47kbY7K5keC/ql06MtbS0
- TLSH T14265AF5AB2B441F8C06BD178CA87A91BFB723848033159FF17E046561FA76F19A7BB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Drops desktop.ini file(s)