General
- Target _edb95a1e278ee30fcd26fa313d6ea9c05f6af30a1de00e63ad988e85e0b0cbe5.exe
- Size 6.5MB
- Sample260620-mfl79aet6m
- SHA256 edb95a1e278ee30fcd26fa313d6ea9c05f6af30a1de00e63ad988e85e0b0cbe5
- MD5 179f63b112f02c9c5342ce96c337b979
- SHA1 6208ad030b0d018853a0f293ae900be5faca997c
- SHA512 4c00a6f457c86e5bf513344013ef3baef0d4946371a16407b82bc9f58254aa8d7fa1d99f71afbc28c0b4825a5600c4f17b89f17f3d80c827cdd36e9d92b0b0d7
- SSDEEP 98304:DMqknsDBm8FPStaYVTh4g1Z/Jf74XQ1qV8pK7W0IY2JPFbG:DYwvPe/hJxaQbphlPFS
- TLSH T1EA66F107FCA508F6C0AE9272896255867B72BC452F3163D72E50B7782FB2BD0AD79704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
_edb95a1e278ee30fcd26fa313d6ea9c05f6af30a1de00e63ad988e85e0b0cbe5.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
_edb95a1e278ee30fcd26fa313d6ea9c05f6af30a1de00e63ad988e85e0b0cbe5.exe
Resource
win11ltsc2024-20260618-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target _edb95a1e278ee30fcd26fa313d6ea9c05f6af30a1de00e63ad988e85e0b0cbe5.exe
- Size 6.5MB
- SHA256 edb95a1e278ee30fcd26fa313d6ea9c05f6af30a1de00e63ad988e85e0b0cbe5
- MD5 179f63b112f02c9c5342ce96c337b979
- SHA1 6208ad030b0d018853a0f293ae900be5faca997c
- SHA512 4c00a6f457c86e5bf513344013ef3baef0d4946371a16407b82bc9f58254aa8d7fa1d99f71afbc28c0b4825a5600c4f17b89f17f3d80c827cdd36e9d92b0b0d7
- SSDEEP 98304:DMqknsDBm8FPStaYVTh4g1Z/Jf74XQ1qV8pK7W0IY2JPFbG:DYwvPe/hJxaQbphlPFS
- TLSH T1EA66F107FCA508F6C0AE9272896255867B72BC452F3163D72E50B7782FB2BD0AD79704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.