General
- Target stager.exe
- Size 9.4MB
- Sample260621-yxt5zaf151
- SHA256 b8bedb7abada59f8d4098ed8b72e8843073594e8fe28c8fdd4a1b3b3f2844989
- MD5 ccf4375b8540ed39ae3fedf1c06d2159
- SHA1 f65523a74431f19292a3969b18fb1d1cb06c7fd4
- SHA512 12283481e092c0ee3caa56709ceaadc96c8fcfd9f981389a9d1bdda13e400371b1038d0c2fbbb5db20119a898326f93726e3ea1f3ad12a4adb5ce33a2967f23b
- SSDEEP 196608:Whcd3wLuXEpXnH2ph1iut1/1QpL0uQg+o97getK7vocgpVFSZ:WhAEuXEAphVtrQSg+oOuK7vZgtS
- TLSH T115A6339CA3E049FAF8B3853D5AA5D401E7F2B4902F52D2EB13B046191E3B7D18E347A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
stager.exe
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
stager.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
stager.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
stager.exe
Resource
win11ltsc2024-20260617-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target stager.exe
- Size 9.4MB
- SHA256 b8bedb7abada59f8d4098ed8b72e8843073594e8fe28c8fdd4a1b3b3f2844989
- MD5 ccf4375b8540ed39ae3fedf1c06d2159
- SHA1 f65523a74431f19292a3969b18fb1d1cb06c7fd4
- SHA512 12283481e092c0ee3caa56709ceaadc96c8fcfd9f981389a9d1bdda13e400371b1038d0c2fbbb5db20119a898326f93726e3ea1f3ad12a4adb5ce33a2967f23b
- SSDEEP 196608:Whcd3wLuXEpXnH2ph1iut1/1QpL0uQg+o97getK7vocgpVFSZ:WhAEuXEAphVtrQSg+oOuK7vZgtS
- TLSH T115A6339CA3E049FAF8B3853D5AA5D401E7F2B4902F52D2EB13B046191E3B7D18E347A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.