General
- Target woofer.exe
- Size 3.9MB
- Sample260604-s7c2jsax3n
- SHA256 f57ba4fb5220a2088bdf706a3241a1fab6f329ab7b769ddac7a1f6abe68f0488
- MD5 70b77a255c325b84e5c962b3585b19b1
- SHA1 7e937613886edfef007936420e5da854149d8324
- SHA512 de7ac4e92ec2b5aedaeb5120000149844eeac495c14d873c8aa2ac57ac888cd4fe58ba7b77c3b73e0a072f9a2ea6c5fed802795b3c4c5907b4557d2dda8724c3
- SSDEEP 49152:NQOvyJzZ6l54k8CldDQdJAA3s/tHCv9iyVhDaI1IEAzMv:NQOV4kBQdveJWDaI1IEAzMv
- TLSH T1AC163A43A9DB0DE5CDD267B8A1D71339B734FD358A295F6B6608C1212E636C4AD2EF00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
woofer.exe
Resource
win10ltsc2021-20260513-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target woofer.exe
- Size 3.9MB
- SHA256 f57ba4fb5220a2088bdf706a3241a1fab6f329ab7b769ddac7a1f6abe68f0488
- MD5 70b77a255c325b84e5c962b3585b19b1
- SHA1 7e937613886edfef007936420e5da854149d8324
- SHA512 de7ac4e92ec2b5aedaeb5120000149844eeac495c14d873c8aa2ac57ac888cd4fe58ba7b77c3b73e0a072f9a2ea6c5fed802795b3c4c5907b4557d2dda8724c3
- SSDEEP 49152:NQOvyJzZ6l54k8CldDQdJAA3s/tHCv9iyVhDaI1IEAzMv:NQOV4kBQdveJWDaI1IEAzMv
- TLSH T1AC163A43A9DB0DE5CDD267B8A1D71339B734FD358A295F6B6608C1212E636C4AD2EF00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Modifies boot configuration data using bcdedit
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory