General
- Target legacy-notepad-x64.exe
- Size 256KB
- Sample260621-ehpr6abs7m
- SHA256 00e67923f531e5590ab404aa5b906470b7c1505ec75cf69f22db99509de9fb56
- MD5 060805b70704a1e6c0ae1ee20fcb60b0
- SHA1 335a7e9645037f9c0022a9f5f3faf2119aef1b14
- SHA512 ba3f6a402a483ec3086d3199e2907c6124d83acaf8e0abcad6e38546cd12173e872e6b03960053fe39752d1498924738db3c730a9f24cf01a308120d213edb26
- SSDEEP 6144:H17Cxt2y0fKLfLRfcOPf6U7M1vibdl3VIdZu2vfxO6v+s:HQUI3VAu2RO6j
- TLSH T137446B1966A90CFDE97BC179CE428A11EB737C4547A0DACF175049A50F33AD0EE3AB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
legacy-notepad-x64.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
legacy-notepad-x64.exe
Resource
win11ltsc2024-20260618-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target legacy-notepad-x64.exe
- Size 256KB
- SHA256 00e67923f531e5590ab404aa5b906470b7c1505ec75cf69f22db99509de9fb56
- MD5 060805b70704a1e6c0ae1ee20fcb60b0
- SHA1 335a7e9645037f9c0022a9f5f3faf2119aef1b14
- SHA512 ba3f6a402a483ec3086d3199e2907c6124d83acaf8e0abcad6e38546cd12173e872e6b03960053fe39752d1498924738db3c730a9f24cf01a308120d213edb26
- SSDEEP 6144:H17Cxt2y0fKLfLRfcOPf6U7M1vibdl3VIdZu2vfxO6v+s:HQUI3VAu2RO6j
- TLSH T137446B1966A90CFDE97BC179CE428A11EB737C4547A0DACF175049A50F33AD0EE3AB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.