General
- Target cyrene.exe
- Size 42.3MB
- Sample260622-ev1eesgy9p
- SHA256 9a0ae42390a3bdc2ff7fa40f60b9b1f4618302847520808323f816efd58459f2
- MD5 b56b522b85cecce32c732cceada59647
- SHA1 41fa19870581f0bb06d8421c7459e205234e9fba
- SHA512 f1c6ea1dc9f403875dddbb1ca65c1d2481b27215e290485dc25f42294a385176ecdb8bac7a349fc1e7de03ea99cc7d91a514a2592369b1455e3ab04d2cbd5788
- SSDEEP 786432:XdXsdk3HEeOe0rmWPoFm5STW2WZ9W8knXMb8QhPA5H6LQrRQ7663ur5KPvCZ+4V3:XRsQELFqWumvxZ9WpcbhPyTw+rwk+4V
- TLSH T1F1A7335ABB6920EDE94B937CC1D4862FB6E07D66177086DB87684E2654230EDFC30732
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
cyrene.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
cyrene.exe
Resource
win11ltsc2024-20260618-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target cyrene.exe
- Size 42.3MB
- SHA256 9a0ae42390a3bdc2ff7fa40f60b9b1f4618302847520808323f816efd58459f2
- MD5 b56b522b85cecce32c732cceada59647
- SHA1 41fa19870581f0bb06d8421c7459e205234e9fba
- SHA512 f1c6ea1dc9f403875dddbb1ca65c1d2481b27215e290485dc25f42294a385176ecdb8bac7a349fc1e7de03ea99cc7d91a514a2592369b1455e3ab04d2cbd5788
- SSDEEP 786432:XdXsdk3HEeOe0rmWPoFm5STW2WZ9W8knXMb8QhPA5H6LQrRQ7663ur5KPvCZ+4V3:XRsQELFqWumvxZ9WpcbhPyTw+rwk+4V
- TLSH T1F1A7335ABB6920EDE94B937CC1D4862FB6E07D66177086DB87684E2654230EDFC30732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.