General
- Target newest build for beta users.exe
- Size 22.8MB
- Sample260626-wdf3wsds4z
- SHA256 47eff69235c2fdebae5c3d7986807230cbd185252881f340a2b41cd289a4587c
- MD5 7febefeeebf378e74722fbb4552a5f1c
- SHA1 c5d75de393fc76520f1a05035f75c8fffb73f4fd
- SHA512 23c01c157741b4b4eb8325fa8a45ca1add38427f2d355357416342d1eab393c22b521f9aa7e1125e3ff9f2236874aa2d4ab902ef1e2320594ba3a42e92ae2902
- SSDEEP 393216:V/85vzo6mdOzLNAwtbxA/DuCKdhHTodRGkX0ydA742NN+r22PChdJ/:Vk5vzo6LGw3VCM0LhX0c4N+HwX
- TLSH T1CC3733B2538985EEF9E39A318213424027E27C009B28DDDF5799AD56BC377F05A394B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
newest build for beta users.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
newest build for beta users.exe
Resource
win11ltsc2024-20260617-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
built.js
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
built.js
Resource
win11ltsc2024-20260617-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target newest build for beta users.exe
- Size 22.8MB
- SHA256 47eff69235c2fdebae5c3d7986807230cbd185252881f340a2b41cd289a4587c
- MD5 7febefeeebf378e74722fbb4552a5f1c
- SHA1 c5d75de393fc76520f1a05035f75c8fffb73f4fd
- SHA512 23c01c157741b4b4eb8325fa8a45ca1add38427f2d355357416342d1eab393c22b521f9aa7e1125e3ff9f2236874aa2d4ab902ef1e2320594ba3a42e92ae2902
- SSDEEP 393216:V/85vzo6mdOzLNAwtbxA/DuCKdhHTodRGkX0ydA742NN+r22PChdJ/:Vk5vzo6LGw3VCM0LhX0c4N+HwX
- TLSH T1CC3733B2538985EEF9E39A318213424027E27C009B28DDDF5799AD56BC377F05A394B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target built.pyc
- Size 78KB
- SHA256 f6b98dc8c858d0515f05213284afd2f56495627d5dc37e372487083fa6a7fcea
- MD5 85c49cb5059efa183bced7d7129c548b
- SHA1 2b908aa893320de5491d19f9c0a283188f249643
- SHA512 34de99bc3be27edc71d35daa35e79554a7db0e21791009d0ad8c17e3b80da420770dda3bdaed7d9230ea48a3a3a6e9ad034999352e44e1478d73f35c6e415647
- SSDEEP 1536:2l7dFBj1vvv+407v8QJT5QMAzU0ow2Bdi+m+mPvswjHBRIUrSTE:2PFBeL8ET5Q9U0ow2BdtRmPvswdfuTE
- TLSH T1C6736C423FB2C87EF309EAB1551B76CEF525686970864F4FA106F8243C46217FAE14B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.