General
- Target patch028998.exe
- Size 1.2MB
- Sample260619-phstxsht2v
- SHA256 a2a54b8abc476d7671d4de0771bb54bf5f2373d79ff6871d0ba6a62c3b88ae00
- MD5 52086b801555ef17e4b51e0acffc70b3
- SHA1 cfd57e014de125db717d1381506ab857fcb7ebd1
- SHA512 ff154875bb6deff3e17d0efd9e814eda8208ed6dfbb424ab3ad349ba84086cd8023df96cc689d90823a0a48fe96d8e75958f4dd990af7399e521a9eab0b446d3
- SSDEEP 24576:A2ctIvKqwpMKvT7QvYMy91tA2DP2crkmQNHElqKlRRaBs:lToMKvPQvOi8AmQNsrlLa
- TLSH T12D459E0773E7C1E9DE7BC1F9C9614226EB31B8640B389ADB2590452EDF63AD04E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
patch028998.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
patch028998.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target patch028998.exe
- Size 1.2MB
- SHA256 a2a54b8abc476d7671d4de0771bb54bf5f2373d79ff6871d0ba6a62c3b88ae00
- MD5 52086b801555ef17e4b51e0acffc70b3
- SHA1 cfd57e014de125db717d1381506ab857fcb7ebd1
- SHA512 ff154875bb6deff3e17d0efd9e814eda8208ed6dfbb424ab3ad349ba84086cd8023df96cc689d90823a0a48fe96d8e75958f4dd990af7399e521a9eab0b446d3
- SSDEEP 24576:A2ctIvKqwpMKvT7QvYMy91tA2DP2crkmQNHElqKlRRaBs:lToMKvPQvOi8AmQNsrlLa
- TLSH T12D459E0773E7C1E9DE7BC1F9C9614226EB31B8640B389ADB2590452EDF63AD04E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.