General
- Target ravmofei.exe
- Size 82KB
- Sample260622-g5ea2sat9y
- SHA256 9a06e82fbe300512f791edae916c94a5d9fe6ba93072545ecd6e12b4e234b240
- MD5 7cf439a90c9bda04350536d7deac816c
- SHA1 502b05a6843af2f72d4cb22dfcf653c6378d3c1c
- SHA512 3ddbde9355172659d26bee24585eedca2377c3df78a04713d6b3291df919422a616efa9472ffa51626243ca13a29dbe6ada4833e557bdca1a1d0f0ce30419e0c
- SSDEEP 1536:eNVoCGPBI2qFeIykRtqL8Csw7hLYEcDj8epKzIzBK/anhF:eEtI2vIRALGfj8eEzABhhF
- TLSH T18D83E005BB28EE87C6E2097D28638D536929FD51AB7ACB8B16453F0F1C731D09D93326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ravmofei.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ravmofei.exe
Resource
win11ltsc2024-20260617-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target ravmofei.exe
- Size 82KB
- SHA256 9a06e82fbe300512f791edae916c94a5d9fe6ba93072545ecd6e12b4e234b240
- MD5 7cf439a90c9bda04350536d7deac816c
- SHA1 502b05a6843af2f72d4cb22dfcf653c6378d3c1c
- SHA512 3ddbde9355172659d26bee24585eedca2377c3df78a04713d6b3291df919422a616efa9472ffa51626243ca13a29dbe6ada4833e557bdca1a1d0f0ce30419e0c
- SSDEEP 1536:eNVoCGPBI2qFeIykRtqL8Csw7hLYEcDj8epKzIzBK/anhF:eEtI2vIRALGfj8eEzABhhF
- TLSH T18D83E005BB28EE87C6E2097D28638D536929FD51AB7ACB8B16453F0F1C731D09D93326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.