General
- Target TaborDumper.exe
- Size 354KB
- Sample260622-n48a3aby8v
- SHA256 7b9c69dd1f3c15ffdaf4277582fe4deb541d3b5608f9b6f3143110e3afab356b
- MD5 92d08ee912cf41b10fce079717ab4f4c
- SHA1 6786d75985b95fcf01f1d9f1d99cf1c75667bfec
- SHA512 0bb338732b0f8c6546946036ad913e7b8316e81dc3a4d0af2872cc5c5204855c3c8f84480519378ecaa34c7b21db6fbe7f6f641b3c50ac795e9d3dabca11e713
- SSDEEP 3072:QhT7KvesvZbuxboLZXK42UZ3m8zadhCAskdIizf+z2tqLxEH4Njv9P2DshMnPRkm:gKves7KCZ3oCAskXz/t0qoJynP+qZH
- TLSH T1E3749E26F7A514F9E177D178CE524906EB727C4A4360A6DF23D44B921F23AE08E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TaborDumper.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
TaborDumper.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target TaborDumper.exe
- Size 354KB
- SHA256 7b9c69dd1f3c15ffdaf4277582fe4deb541d3b5608f9b6f3143110e3afab356b
- MD5 92d08ee912cf41b10fce079717ab4f4c
- SHA1 6786d75985b95fcf01f1d9f1d99cf1c75667bfec
- SHA512 0bb338732b0f8c6546946036ad913e7b8316e81dc3a4d0af2872cc5c5204855c3c8f84480519378ecaa34c7b21db6fbe7f6f641b3c50ac795e9d3dabca11e713
- SSDEEP 3072:QhT7KvesvZbuxboLZXK42UZ3m8zadhCAskdIizf+z2tqLxEH4Njv9P2DshMnPRkm:gKves7KCZ3oCAskXz/t0qoJynP+qZH
- TLSH T1E3749E26F7A514F9E177D178CE524906EB727C4A4360A6DF23D44B921F23AE08E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.