Overview
overview
8Static
static
1Firmware.22.1.0.zip
windows10-2004-x64
1Firmware.22.1.0.zip
windows11-ltsc_2024-x64
1001d8d5a7f...a1.nca
windows10-2004-x64
3001d8d5a7f...a1.nca
windows11-ltsc_2024-x64
800c00013ca...mt.nca
windows10-2004-x64
300c00013ca...mt.nca
windows11-ltsc_2024-x64
800d460df4a...71.nca
windows10-2004-x64
300d460df4a...71.nca
windows11-ltsc_2024-x64
8015531c227...mt.nca
windows10-2004-x64
3015531c227...mt.nca
windows11-ltsc_2024-x64
3015c2cf296...mt.nca
windows10-2004-x64
3015c2cf296...mt.nca
windows11-ltsc_2024-x64
3022f472c66...mt.nca
windows10-2004-x64
3022f472c66...mt.nca
windows11-ltsc_2024-x64
303e9f7441f...19.nca
windows10-2004-x64
303e9f7441f...19.nca
windows11-ltsc_2024-x64
308aeb001da...5c.nca
windows10-2004-x64
308aeb001da...5c.nca
windows11-ltsc_2024-x64
3097040afca...19.nca
windows10-2004-x64
3097040afca...19.nca
windows11-ltsc_2024-x64
309f2e9c7f1...mt.nca
windows10-2004-x64
309f2e9c7f1...mt.nca
windows11-ltsc_2024-x64
30afdafecbf...f8.nca
windows10-2004-x64
30afdafecbf...f8.nca
windows11-ltsc_2024-x64
80b4e1f6006...mt.nca
windows10-2004-x64
30b4e1f6006...mt.nca
windows11-ltsc_2024-x64
30bb5d66fd0...mt.nca
windows10-2004-x64
30bb5d66fd0...mt.nca
windows11-ltsc_2024-x64
80cf95a44b4...mt.nca
windows10-2004-x64
30cf95a44b4...mt.nca
windows11-ltsc_2024-x64
30d2516ac51...a8.nca
windows10-2004-x64
30d2516ac51...a8.nca
windows11-ltsc_2024-x64
3General
- Target Firmware.22.1.0.zip
- Size 324.8MB
- Sample260624-1dackafy8p
- SHA256 d8cd72869a93cbf7b8e9ceaf135d8760f1ff8aaa001a2c0293210dc958d2fb34
- MD5 d12b63272c93f35aa4136de11597287e
- SHA1 e2cbe7f9e00f467e6c0a5d77e40cc567a32a70c9
- SHA512 0986362bad2eb086d0daab427b9be972641fd946d1b9fbb00cb6aebbaac4cb154751c94429bf520fd944d599df4104975a530748210749fbcf76461dd5f74b68
- SSDEEP 6291456:l3vx42C3sOKHEd/cYgWrtXhq/ABQoZgNRsv/gBhpzgMPkV+gb:Jx4jNdUErRWRsQBztPjgb
- TLSH T154F8333866EB4E31FA0EB1B62608FD8B881DC946CD965D9B7D16BF83490D52B9D31303
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Firmware.22.1.0.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Firmware.22.1.0.zip
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral3
Sample
001d8d5a7fe8d0cbd148ff67d3b830a1.nca
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
001d8d5a7fe8d0cbd148ff67d3b830a1.nca
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral5
Sample
00c00013ca5346577e30870b5294c31f.cnmt.nca
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
00c00013ca5346577e30870b5294c31f.cnmt.nca
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral7
Sample
00d460df4a07b37c6a39c3eb7187f771.nca
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
00d460df4a07b37c6a39c3eb7187f771.nca
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral9
Sample
015531c2279f834e48500eb0c2a5f8c1.cnmt.nca
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
015531c2279f834e48500eb0c2a5f8c1.cnmt.nca
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral11
Sample
015c2cf2965610293715e2ad330f6f94.cnmt.nca
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
015c2cf2965610293715e2ad330f6f94.cnmt.nca
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral13
Sample
022f472c66aa4d3a0ada801ec0f2650b.cnmt.nca
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
022f472c66aa4d3a0ada801ec0f2650b.cnmt.nca
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral15
Sample
03e9f7441faea200b14646c32c019c19.nca
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
03e9f7441faea200b14646c32c019c19.nca
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral17
Sample
08aeb001da384efaf891a8d3af186a5c.nca
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
08aeb001da384efaf891a8d3af186a5c.nca
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral19
Sample
097040afca3d34fa69dd6d738cdc5119.nca
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
097040afca3d34fa69dd6d738cdc5119.nca
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral21
Sample
09f2e9c7f15084e2caf6b2e073dd7e54.cnmt.nca
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
09f2e9c7f15084e2caf6b2e073dd7e54.cnmt.nca
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral23
Sample
0afdafecbf4bbc9ff67ab9930a0520f8.nca
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
0afdafecbf4bbc9ff67ab9930a0520f8.nca
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral25
Sample
0b4e1f6006232d882fd31c08d73b95b1.cnmt.nca
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
0b4e1f6006232d882fd31c08d73b95b1.cnmt.nca
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral27
Sample
0bb5d66fd0fc610f4c3d70d6b8f69633.cnmt.nca
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
0bb5d66fd0fc610f4c3d70d6b8f69633.cnmt.nca
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral29
Sample
0cf95a44b4b0b70c6d37477909f3c529.cnmt.nca
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
0cf95a44b4b0b70c6d37477909f3c529.cnmt.nca
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral31
Sample
0d2516ac51a57f1cb4e140810df18ba8.nca
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
0d2516ac51a57f1cb4e140810df18ba8.nca
Resource
win11ltsc2024-20260618-en
Malware Config
Targets
-
- Target Firmware.22.1.0.zip
- Size 324.8MB
- SHA256 d8cd72869a93cbf7b8e9ceaf135d8760f1ff8aaa001a2c0293210dc958d2fb34
- MD5 d12b63272c93f35aa4136de11597287e
- SHA1 e2cbe7f9e00f467e6c0a5d77e40cc567a32a70c9
- SHA512 0986362bad2eb086d0daab427b9be972641fd946d1b9fbb00cb6aebbaac4cb154751c94429bf520fd944d599df4104975a530748210749fbcf76461dd5f74b68
- SSDEEP 6291456:l3vx42C3sOKHEd/cYgWrtXhq/ABQoZgNRsv/gBhpzgMPkV+gb:Jx4jNdUErRWRsQBztPjgb
- TLSH T154F8333866EB4E31FA0EB1B62608FD8B881DC946CD965D9B7D16BF83490D52B9D31303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target 001d8d5a7fe8d0cbd148ff67d3b830a1.nca
- Size 1.2MB
- SHA256 001d8d5a7fe8d0cbd148ff67d3b830a16308ec0a4f14be601686f6494e1294bc
- MD5 018e411197c0522e615866ae69dc748a
- SHA1 a35b7ba52a05850114fd7cfefb2a4be4031ed92e
- SHA512 eef8489c4f657f1061514683c2579793797d8816c16ca2c675bf17f5d6e7b01faf25bd65c6adfb38c885797b0d065d3bd31508f17866db999b51935e856bb7f3
- SSDEEP 24576:GiGLDd4kKSoTzKxDyJdkmoZQ5EQJ5X6g2H3mz5lbb/dEax92m:JGukKdTzK80bZvAX6g2H3mFdDdEaD/
- TLSH T12D5533E990471EFA1490AEC579801CE0F60299EE69C66FF2279F8C167DCF305275B60E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 00c00013ca5346577e30870b5294c31f.cnmt.nca
- Size 3KB
- SHA256 00c00013ca5346577e30870b5294c31f52b973477299802cc26a1ae7f212d65d
- MD5 50d7a062f8313dcb35a90ed470e17213
- SHA1 892a3b1fdff1db2465b8961d9a2cea430f154624
- SHA512 22d15e0eba2bb8e0f822aea490a66f31636d09f1f60e4f9787ece8281558697aa930b70cfb323b7873203b493ee371f55dbc36deffa8e9f905364c8d595568f3
- TLSH T193716E7553E34D444249E413532A7CCBC835AA8D4A4AD5437DEC5EE32B45C372D16242
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 00d460df4a07b37c6a39c3eb7187f771.nca
- Size 179KB
- SHA256 00d460df4a07b37c6a39c3eb7187f7712c141e9f6ea9e9f87dcbffd6efbc76d4
- MD5 4202b2eabbd69a95253d95269e508ad7
- SHA1 7559d8bebe369eb4895151ebd8778fb869a9924d
- SHA512 3dab116d8345e3357bdce1a957bd0dda0465fd832a500cc088c183d5178f71385dd746ba3d1fcda11e0ab438fd299acf6618b78ecd102d7e2bf265f6631c6872
- SSDEEP 3072:mf8ykr/DJtuX/JOUhfgnWSCuOY/IzRQLpJcmWbeajswJJLfby5DNmQQMZ/BeUfjb:qirttuvJthfGO3QpqC3I3EDNqMZ/b
- TLSH T1B804125980C19DE4A38869B30425FF16CB68D3F25F48AAC657C5AA5C6C4EB0D1ED313F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 015531c2279f834e48500eb0c2a5f8c1.cnmt.nca
- Size 3KB
- SHA256 015531c2279f834e48500eb0c2a5f8c135a43e12db7136143869907bc49c9b63
- MD5 4d3851947523b6e68b7bc6586100a221
- SHA1 f69a4b2d9c3a32af3f79870c78f5326e51feed0e
- SHA512 42a19026801f5480211ca1e7bf749e292ee7054316f2c312f8aeea76c9ade5775c71a6e3b4b67686cfa0efa38e7ce1045418642ee292de00b1dbeda238d2c224
- TLSH T10B718E3633D30C10824BBC8A17227CC7D52CDA85490765A63DD9AEF21589A232D61217
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target 015c2cf2965610293715e2ad330f6f94.cnmt.nca
- Size 3KB
- SHA256 015c2cf2965610293715e2ad330f6f94b52f62b2d80bb651d968a66543053c49
- MD5 2c3b80ff2bf9fb66ce097be3cb6ce1c9
- SHA1 3647fd027d5590a423bec614f4f58e301e1372b2
- SHA512 76d7c16921788ee5dae2f16a77852eca811384ba6ac6c36ca84d8d7b3654fdf2eaa9bc3bb967c45febc307e54f4e6d6eb1bfe2388792b4158104f5552b659a01
- TLSH T128716D3962E74D00C789FC92C761BD8BC43C8B871B58570678D42BE136569372A56221
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target 022f472c66aa4d3a0ada801ec0f2650b.cnmt.nca
- Size 3KB
- SHA256 022f472c66aa4d3a0ada801ec0f2650b006b75c2357629287a8f97ab3c05c725
- MD5 07285c37bff231e7950e4a86b4d1e961
- SHA1 352084816262e11ea107c6d484801594ab317b98
- SHA512 19ba922904cc233f620b4af47058e4ea997542c33ef47e613378d5ccca08fdfeb74fe53f65a147235cc81e28a0d8cb10fde73fdf45924d82265468b892e5d981
- TLSH T1B2715D3427EB4C04974E6C6657277CCBD434EA96814EA7473CDD6ED31941D2B0861256
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target 03e9f7441faea200b14646c32c019c19.nca
- Size 258KB
- SHA256 03e9f7441faea200b14646c32c019c194ad9f04d4efa4cee31144b0c31ff2be5
- MD5 1496a51728e84f29d76195a42b10b1e4
- SHA1 7fb3e25561b22287115bd36dacefb3b29413b632
- SHA512 f648295b64e8c829f37b2a122b770efbd3291bd8cc208eb04ce969fb51a495c5b2c4f8f4bb2b4a7c2cf8281fc87048cf0332d54a2fa86f6ba1621020341e9e47
- SSDEEP 6144:R641mi2IPiy/IRrr092I18t9O0ntS9MptE+8rFwJ9lHyqMC:R641mtIPJqAg9nNE+8rm1HrMC
- TLSH T11144236648C9F5AA734E25D4320758C62B8BF1E84CF702BFEF8B689A1C072586C7D4D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 08aeb001da384efaf891a8d3af186a5c.nca
- Size 157KB
- SHA256 08aeb001da384efaf891a8d3af186a5c0ba660e3eeff4e5a9e30cf6c12522b1a
- MD5 2a533d3a08295762da29916bb0891ac7
- SHA1 34747b5ab805c89f8b61517d7641cbe35e9f186f
- SHA512 32c431c86fa5fee9f343c1e04bc07d4fd2bb2b068dc32eb7cb2c026e45695ea1dff58fcea079f8396c0a4e99f60c432dbe5f14b0e883688231d67d070b261873
- SSDEEP 3072:KoRZQEC0j/fh7doMP5GwKpg8sQcb8zJcCN6mgwp6qTlzgxPovmcEQBZzyCtD/y2o:pRpC0j/57TP5pl1b8zJcCN6mCqlzA2nC
- TLSH T144F312CEAAE8C3744FB7CF366AFC76920667488148E61D37A089979126E0E5C1C2C4E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 097040afca3d34fa69dd6d738cdc5119.nca
- Size 349KB
- SHA256 097040afca3d34fa69dd6d738cdc51197e3d9987932bdd45480f9211a1288850
- MD5 f1dace71165a2468d11c279fd92d2981
- SHA1 5d06de03ff04165b933311c858f9dbb72e82a724
- SHA512 1ffa3d9ea256b8da9c701da8bf7cde14b913d7f3aa598f1e98b2db6179652adb39ef30a9508a2b7ba221bee1f4d9d3c82e3c88db38b9c8ad4804c8ec99b4ab25
- SSDEEP 6144:VO1/u2AsPBWLaWg17QuUVPGbZt7knrDW6SyNYgau8Sqm2VznJTLXcjiWholYtZgc:VOTpA2Wo7QuPNt7krq6S4DJqm2lFLXKj
- TLSH T13674233F4C8101AB9369F98E523957095F334DD4EC7AA30A4E2BCFEE68161D349D9CA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 09f2e9c7f15084e2caf6b2e073dd7e54.cnmt.nca
- Size 3KB
- SHA256 09f2e9c7f15084e2caf6b2e073dd7e54a97e46dd94cd85864ef7e0ca954fdcac
- MD5 fa25c8076a375e98fca9ddc220c4e9e5
- SHA1 59b370e20b515194699b4a8a09e03f5693ebd5e3
- SHA512 fa54963b6b9abb052f201a86e390438abdf73cf95afed494bde63db757e9bcb0581b516e717c162080cf1665892c80b3112e7cdab99ccfb7f1bc36ea075ecafc
- TLSH T194715C6267D30D01D3596C53EB22FE8FC438EA4A99CE6B527CE96AE6091A4272C51202
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target 0afdafecbf4bbc9ff67ab9930a0520f8.nca
- Size 766KB
- SHA256 0afdafecbf4bbc9ff67ab9930a0520f82e1c3bf3ded6f45fde128b55b3892001
- MD5 5a8f3eee2e46fdf10d7502c32eb5ff7b
- SHA1 2866532a6e6794c26535c514bb3d50f52979bc60
- SHA512 5f44f360d71e6540a3ebe39e0ed52288b6a7ba023688216729677db4612dcab33358317144e9187067146306fc1ad3d547ced6855dc1b2e324b6a3f26d999ed6
- SSDEEP 12288:r6qIOxjPYplGO9ypqB+8A1Xdbwtg2L0QGl/5PPjW3tO0R+mUCfEiB+Oq5:2qxUplX8qA17cMPPiM0R+mTfEisOq5
- TLSH T1D0F433D8DEBD433EA32545402595B49FFC588FE0AD14086D175E9BF8F0CABABB1224E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 0b4e1f6006232d882fd31c08d73b95b1.cnmt.nca
- Size 3KB
- SHA256 0b4e1f6006232d882fd31c08d73b95b1622ae0fc962832c984bbab881faa332e
- MD5 d5483be7249e40eb8314ba2c76afa32d
- SHA1 a153118288e13803b4afef560159e4248f55e942
- SHA512 c41dc0fd5ca670830b06af3cbf343a3d1256feff251fb27a97e75e7e02f9be843ec15eb94ba80eb958a8caa9baf9b776044facb1c2f01c5b9094eccf9c0ba6cc
- TLSH T1E1716D70A2D74C00DB4CEC92632E7D87C43869DD080915D77CE577D73566C2B2CE9252
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target 0bb5d66fd0fc610f4c3d70d6b8f69633.cnmt.nca
- Size 3KB
- SHA256 0bb5d66fd0fc610f4c3d70d6b8f696332349443f456feab2173b1c265edabd6e
- MD5 873a8926b28756d611146cc1d03936b4
- SHA1 7b94a9f70570ead6c1d0e3ac9501fdbe82ea382a
- SHA512 7d081c2409224a8946eeb64a5577754924500220464bc434f7bb40cfd24d48990fc8a1c21be76aac959bc2b830cef2a145c0036842007728d44f064b9867b0d4
- TLSH T1DC716D3637FB4E008348985A771AFD8FC439DD9F4549564B3DA959D31C4483B2EA2351
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target 0cf95a44b4b0b70c6d37477909f3c529.cnmt.nca
- Size 3KB
- SHA256 0cf95a44b4b0b70c6d37477909f3c529b02afb0692064e640d428611eb3c1d29
- MD5 1de1cd53b36f9b85776b80f1332a22a4
- SHA1 40796cbf04eb9c6755eb4f473fee01789e02694b
- SHA512 54d76f08e19a8a44e406af8fb17c7d1d0d518de407ccb8f8e9528c135f84021c90c87a2e3cff5e8579cc2db0036e73aac10a13c5ddee20feb7e553d5103b6e57
- TLSH T198715D75A3E71C40578CBC63BB157CC7C138BF8D424E66913CD89AD2168C9177DA6216
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target 0d2516ac51a57f1cb4e140810df18ba8.nca
- Size 242KB
- SHA256 0d2516ac51a57f1cb4e140810df18ba82eae77c4f457be4b5c4c5fc317c63cc5
- MD5 cbdfdf09ed35221582ef06514e6afed0
- SHA1 cfbd9f3426c282be45253e7604527003b348ef3d
- SHA512 c30b76f3bc443668ce73d67ca387ba3760b5abe4d94dc4a9062370d0041379379ba62d8c3327661087e18c4f1914af4644c0ae5e1cd78010e5998e7ba2690fb5
- SSDEEP 6144:M8ohZdpNbUX/Ql0u1ijYRh2DXyyaAAvyeQA/pGMvFE:M8oNp+X/QlnijG2zZovyeQGEQE
- TLSH T10434230CAB59DE39E48C1850951E534F5A3E57C843CEFFD208B8A609BD93212FCA6B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10