General
- Target SQLyog.Enterprise.v6.13.Incl.Keymaker [2-36941].rar
- Size 9.7MB
- Sample260623-p5aa4acy9r
- SHA256 5ab0d0d18a02d5df93f649d61373410adb42efa7ebedf6c8d3004dd2aaf7bc7f
- MD5 86bdc3cfc72064e4de79fd7edb762087
- SHA1 e8934b29d36c1014472aa8e49d7185939107bb21
- SHA512 11556799287568fe4bfb837d2aa4d5f11c38f49d1afcc76d84c5c6fcd1daa913bcba00f238a502d4f00cf6ca5e2a391efc9f077d7eac0b438284029b29e1d704
- SSDEEP 196608:e6nMQ3qkjT1FM2JRXd80tM2c4X0TNrjEgrOEhXE8N1B0T:v5qO1FMa80tMT/kyXy
- TLSH T1C8A6335F7A36D586C23771B29E7EE6D9B4C642D0302C8DD4864C8B046BBDB03EDB2916
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
SQLyog.Enterprise.v6.13.Incl.Keymaker [2-36941].rar
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
SQLyog.Enterprise.v6.13.Incl.Keymaker [2-36941].rar
Resource
win11ltsc2024-20260617-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target SQLyog.Enterprise.v6.13.Incl.Keymaker [2-36941].rar
- Size 9.7MB
- SHA256 5ab0d0d18a02d5df93f649d61373410adb42efa7ebedf6c8d3004dd2aaf7bc7f
- MD5 86bdc3cfc72064e4de79fd7edb762087
- SHA1 e8934b29d36c1014472aa8e49d7185939107bb21
- SHA512 11556799287568fe4bfb837d2aa4d5f11c38f49d1afcc76d84c5c6fcd1daa913bcba00f238a502d4f00cf6ca5e2a391efc9f077d7eac0b438284029b29e1d704
- SSDEEP 196608:e6nMQ3qkjT1FM2JRXd80tM2c4X0TNrjEgrOEhXE8N1B0T:v5qO1FMa80tMT/kyXy
- TLSH T1C8A6335F7A36D586C23771B29E7EE6D9B4C642D0302C8DD4864C8B046BBDB03EDB2916
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.