General
- Target touchskins.exe
- Size 5.3MB
- Sample260623-1rlmragw3p
- SHA256 600a494919af4fef7221bb8916fb73ca39f7b6e2524411f14455dde980fe1dbc
- MD5 48d2de5aa80c1ccfc4256313a9775e2a
- SHA1 3dea6c7a337008e6cf144a9f51d1391d787a6970
- SHA512 d15e263c3d8f97f7ec4b974cf3ee8ac83ddafa2063e6cdda03be7562a4b5c74e6d4f8bf0c94f0aa291b30000b9c7f78d6bb5f06be253868773886b1027cdd902
- SSDEEP 98304:Cv1rxPb96y+gGDdMdVI9IpyKc+EFhjFuQE8:CvzR7e6wHhYA
- TLSH T1E7468D43B2E664FCC916C134930BA733E9357C490621ADAB56D0EB703EB69906F3EB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
touchskins.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
touchskins.exe
Resource
win11ltsc2024-20260617-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target touchskins.exe
- Size 5.3MB
- SHA256 600a494919af4fef7221bb8916fb73ca39f7b6e2524411f14455dde980fe1dbc
- MD5 48d2de5aa80c1ccfc4256313a9775e2a
- SHA1 3dea6c7a337008e6cf144a9f51d1391d787a6970
- SHA512 d15e263c3d8f97f7ec4b974cf3ee8ac83ddafa2063e6cdda03be7562a4b5c74e6d4f8bf0c94f0aa291b30000b9c7f78d6bb5f06be253868773886b1027cdd902
- SSDEEP 98304:Cv1rxPb96y+gGDdMdVI9IpyKc+EFhjFuQE8:CvzR7e6wHhYA
- TLSH T1E7468D43B2E664FCC916C134930BA733E9357C490621ADAB56D0EB703EB69906F3EB54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.