General
- Target CmWebAdmin.exe
- Size 11.1MB
- Sample260624-wdkfbaes2m
- SHA256 016fbac7e0119c66ffdbd5c24ec7c1f298c8fed155f02571f2e1e160c8b6328b
- MD5 a8217f7bb1930078c7e6f7deeb42cec8
- SHA1 2ae0aecdaec09ad18aac5523e5505caf4992a499
- SHA512 a466b9f5fc66efee01ac4603af06b908a69610cafb4bf7dbadd5eb01b44cb12f580d6f96a493122abb2a019618174502a6fdac5440e9cfe0eb9533af3eac2520
- SSDEEP 98304:bSCbZx8h6PQp/No3Oqas7FF674lVeJs3fUEYYbBhtfYx2SnZ:Os7PQp/23daic7w3ftYYVf70Z
- TLSH T17DC65B17EC9584E4C0ADD13089669263BB717C588B3427D33B64FA782FB7BD069BA710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
CmWebAdmin.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
CmWebAdmin.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target CmWebAdmin.exe
- Size 11.1MB
- SHA256 016fbac7e0119c66ffdbd5c24ec7c1f298c8fed155f02571f2e1e160c8b6328b
- MD5 a8217f7bb1930078c7e6f7deeb42cec8
- SHA1 2ae0aecdaec09ad18aac5523e5505caf4992a499
- SHA512 a466b9f5fc66efee01ac4603af06b908a69610cafb4bf7dbadd5eb01b44cb12f580d6f96a493122abb2a019618174502a6fdac5440e9cfe0eb9533af3eac2520
- SSDEEP 98304:bSCbZx8h6PQp/No3Oqas7FF674lVeJs3fUEYYbBhtfYx2SnZ:Os7PQp/23daic7w3ftYYVf70Z
- TLSH T17DC65B17EC9584E4C0ADD13089669263BB717C588B3427D33B64FA782FB7BD069BA710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.