General
- Target HelloNeighbor2.exe
- Size 336KB
- Sample260627-xmervscy3w
- SHA256 b1216a5590a9bf751d9562afe7b5b4c08d7dc33c2610c1986c828fdb8112e9ad
- MD5 b019dae23f91022b98b5107f51d9b754
- SHA1 66d6dafb6c50e9c3afc86593f7f933e491293b76
- SHA512 1179cd342799d4ced51b6db0f186a031e1389fac3372b46ec6141465ee8c093930dcbb0bae66f325bd9e729e7cb20c59e50c619f1b9153834b03fe74248e8e2b
- SSDEEP 6144:ctwbK7/5uUYM1C7Ngl17B682NA95cNr+A3X0975BJgirWwVUEa+T3wee92maRc:ctRz5uUYMMel17sHNA95009jJd6shT3E
- TLSH T12B74F10BF76534E8D0BB8678CCE20409ABB6747046A58B5F8664066A6F377D0CD3BB71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HelloNeighbor2.exe
Resource
win10v2004-20260513-en
8 signatures
300 seconds
Behavioral task
behavioral2
Sample
HelloNeighbor2.exe
Resource
win11ltsc2024-20260617-en
14 signatures
300 seconds
Malware Config
Targets
-
- Target HelloNeighbor2.exe
- Size 336KB
- SHA256 b1216a5590a9bf751d9562afe7b5b4c08d7dc33c2610c1986c828fdb8112e9ad
- MD5 b019dae23f91022b98b5107f51d9b754
- SHA1 66d6dafb6c50e9c3afc86593f7f933e491293b76
- SHA512 1179cd342799d4ced51b6db0f186a031e1389fac3372b46ec6141465ee8c093930dcbb0bae66f325bd9e729e7cb20c59e50c619f1b9153834b03fe74248e8e2b
- SSDEEP 6144:ctwbK7/5uUYM1C7Ngl17B682NA95cNr+A3X0975BJgirWwVUEa+T3wee92maRc:ctRz5uUYMMel17sHNA95009jJd6shT3E
- TLSH T12B74F10BF76534E8D0BB8678CCE20409ABB6747046A58B5F8664066A6F377D0CD3BB71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.