General
- Target Education_Report_14783926.zip
- Size 28KB
- Sample260626-lt9p2aa12j
- SHA256 4615631ba3997c8a88c790e8ca25a4114a471b7e1b4e4822cf06a7a772809efb
- MD5 8a677e5bc2b5014979b78d9fbb0d8a55
- SHA1 43c4418ffe25a76ecf71aa28defa5c65aea0b7d7
- SHA512 9feed7b9aacd2bfbda44980c925e5c643f700070e82924435b71e7c5d64bb7936f8ed0b9d140bc801d22ef1981c281246a1b995014d1c88a71a991b2e96f2a95
- SSDEEP 384:xq8ag9WdQpaxsFGR1xRPyEiLuMz7QEiQBaYszW5ouA2rZxWIDy2WE7zx8e7DGI8l:xQxQCv9uNz7jBxLlZw92WEhDyJDme
- TLSH T16CD2E1F211D2D459E90A2327199E72EF8CB0DE06F8D9F24B42EA1DE2506347746D41F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
EducatedPersonRegistryExtract.pdf
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
EducatedPersonRegistryExtract.pdf
Resource
win11ltsc2024-20260617-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target EducatedPersonRegistryExtract.pdf
- Size 30KB
- SHA256 d10c4426121b908229154e774bc47fb969810994c6f1f7335369ac0d23871da7
- MD5 468024965d153396956221dc0bdf316d
- SHA1 0bc711ce174c90a01a185b238357fc98f941893d
- SHA512 378227f81bc1043579de13091b5270e87f2e0121b10de6660c66ef9ddefb6a38a955efee8df590ca9eda831500c70cd0a5e856efaaa9ff48954f97224b0de3c0
- SSDEEP 768:YlTUveIdxr98FU8UTZ6O6PJNHeYiG/nw9n4K5z1mrgIyz:MUve898an6ROvG/nw91ggFz
- TLSH T17BD2AE34DA952C8CF8E3CF835079381EA829F24A8BCD8560342D1B49BD944F779759EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.