General
- Target edv_multi-line_software_4.0.0.8.zip
- Size 1.9MB
- Sample260622-btlcbshs3x
- SHA256 97643b2db121b75f22b4ec4b913b96e18192d9a4a7e6de3fe36e44db23183844
- MD5 45faff4116a31c942758bb13cf43fe14
- SHA1 05c8db0b22c3624eea1a53f9683260580425c086
- SHA512 a31b40de89ed1dcd17842bcf6cea9065a5247184b85f0b7da6e20301a192cc37d7847579f0f9784d54ea422ac9004e1ff52b6f87b076e0682348967d48561b67
- SSDEEP 49152:IVjlTAMotNXkRcr54yzYlVRm0T15SwCgv52/e+9ml/MnEK4j1aX:4bohaUY3M8M2qeGs/6EK+aX
- TLSH T12B9533B6AF58B010A0A37E36E3E1C414DFA5F47317099AB99B560AE5B90BF4D0C38753
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Multi-Line Display Software 4.0.0.8/E2000TP(V4.0.0.8).exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
Multi-Line Display Software 4.0.0.8/E2000TP(V4.0.0.8).exe
Resource
win11ltsc2024-20260617-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Multi-Line Display Software 4.0.0.8/E2000TP(V4.0.0.8).exe
- Size 1.5MB
- SHA256 b1ad0e663366160651717c58618ef4563e34e64b1b2c0e91604ca513ca981997
- MD5 2de2eadd72a3ad0b9994640440d42acd
- SHA1 04c6ed8baf4a3a39f7505ac6e25c2c9b87e84d93
- SHA512 eb74e15327d646b22d2184da73d7a1825e29f4a8a83b0fcc466ae64fc8f4581bd9c3f66e4a9260cf407af21011bbd0804763a0e1562a310ad603faec21632d97
- SSDEEP 12288:J49CneWDJdQKE7j8aUUVhBDJDmwsD7ae4c6IiXvz7IL9erlzLxJSdmy7iLJSCsjW:C9YgF/PUez7I4lmn7OSCsjMHghDe
- TLSH T1AD753A01F1924072E5FE1E351D68337D9EBCAA51CA249AEB5360EA2D7D325835C31F2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.