General
- Target NodeJS2.6.exe
- Size 22.7MB
- Sample260626-p4mvssct7m
- SHA256 963c89b4a21b2619e4b6f7e15d609f70f128bc8c97bda5ba5d7810ac4504e47e
- MD5 ae2020d439dd399569d7380f8af22ab0
- SHA1 206869184451e2e111f2d3c5fd8e77d6ef0856d8
- SHA512 b26d901d50abe470f41ef758db7a9b0a326d3f036d296d3cbe92150685ec7af0319788e11b1a2b5380b0d95ff1876c40a72564b33e2711809a19cc0ae84ee77e
- SSDEEP 393216:HyRsFnaL2N4Mdk9ZmE7xE2O2ymF4MKIfxulAdzRHpc2pTn/dKA6cRuJRg:SRNB9EEVNdyhMK8AiJcyFKA63
- TLSH T1943723C799D46BF8C3838B09D29713CB93C19067DEAA491839CE6C037921D465B4BF7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NodeJS2.6.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NodeJS2.6.exe
Resource
win11ltsc2024-20260617-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target NodeJS2.6.exe
- Size 22.7MB
- SHA256 963c89b4a21b2619e4b6f7e15d609f70f128bc8c97bda5ba5d7810ac4504e47e
- MD5 ae2020d439dd399569d7380f8af22ab0
- SHA1 206869184451e2e111f2d3c5fd8e77d6ef0856d8
- SHA512 b26d901d50abe470f41ef758db7a9b0a326d3f036d296d3cbe92150685ec7af0319788e11b1a2b5380b0d95ff1876c40a72564b33e2711809a19cc0ae84ee77e
- SSDEEP 393216:HyRsFnaL2N4Mdk9ZmE7xE2O2ymF4MKIfxulAdzRHpc2pTn/dKA6cRuJRg:SRNB9EEVNdyhMK8AiJcyFKA63
- TLSH T1943723C799D46BF8C3838B09D29713CB93C19067DEAA491839CE6C037921D465B4BF7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger