General
- Target Driz Ahk Collection.rar
- Size 965KB
- Sample260626-jhmp1sav8m
- SHA256 21f8a1881877ce9df4264aaedcb8d86bc6d0163c7bc322f95b261539763e529b
- MD5 cf79d8f930c5b30fa662d3c2e98d9b8a
- SHA1 c3e7c062ab797254fc8681a822d3d7dcb73581ad
- SHA512 5eb7e757219d43e874710585cc93b0e13b1bb92ee580eff333ec9dd09b67d256ec5e35b041278572a7fab24174b3689e5c957f4ad45386b7b9839fbae96142fa
- SSDEEP 12288:LlTpeHT/Vph9vmUY051sXnKRkwkodDlvollEdvH2xh7nmVFPiJ83jUCX1APQj0Ta:pTuQ01ahgdhvo/GutxojUCmPJbe8I
- TLSH T1A62512CE790477627CE9D0A8DC9399A3EC10C21486A5E41CFE33D893ED37D1A54A6A1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Driz Ahk Collection/AHKS/atlas old source/dezzo rapid fire 2.1/dependencies/lib/rapidfire.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Driz Ahk Collection/AHKS/atlas old source/dezzo rapid fire 2.1/dependencies/lib/rapidfire.ps1
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
Driz Ahk Collection/AHKS/atlas old source/dezzo rapid fire 2.1/main.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Driz Ahk Collection/AHKS/atlas old source/dezzo rapid fire 2.1/main.ps1
Resource
win11ltsc2024-20260617-en
Malware Config
Targets
-
- Target Driz Ahk Collection/AHKS/atlas old source/dezzo rapid fire 2.1/dependencies/lib/rapidfire.ahk
- Size 5KB
- SHA256 6411ad80ee4f5fb766797bf2218595d4c7912b2588d04ee827169506dd56e3f1
- MD5 f91c359fc4f920e9482a15927382d650
- SHA1 c106010e795e5db7b3a38ff8d8d1872b7fc5cd1e
- SHA512 df53e4662043e7bd5dca99c4c7780ee760dcdef07926c44d85ab4a11bdbe1cf4ac3f6f7fb26716d887817877b34d4935df9bff0f18bb5c78d37606e90e683ab8
- SSDEEP 96:YvhXgigerj+Ssi31Jjdg1pS3zdK7ChHqvKQRQFLz6pcm:YvhXgigevNy1gw7C8aVzUT
- TLSH T10EC17553E586757383B091BCEA5300A7FF19027F493214327D853BEC7BFA4689099AAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Driz Ahk Collection/AHKS/atlas old source/dezzo rapid fire 2.1/main.ahk
- Size 51KB
- SHA256 20b0dac13312f6b2916aec29eb48d244f652d0e4d564e39031304dcad5602374
- MD5 1d0513d16dc2527f20ba0a1e529de7c7
- SHA1 18de6c3a5e776b4d7af802db930becc6014b446c
- SHA512 d05ff4312401e22eb4dbf98020f0be5c1be55251600bb69e8e4c2468b93b48e6c7089cb554b93ef693177750e62df5309cc42650eee5202f447e18581575c03a
- SSDEEP 768:2VpkI10v5U1r1gSWd7fJOFhCBZAY7DrQTGWEXoQLvpFeAdij:2svi4fJOaBZAY7DrQTGWajveAdij
- TLSH T1AE3395117B683C26127A59FCED626D58FB66223F0C134EA379CD19DC3FB502582C6B89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10