General
- Target HWIDSPOOFER2.exe
- Size 42.4MB
- Sample260628-3dey6ag19k
- SHA256 e42f12c4d2eea54a5a12739452a9e47cfa8da2dc9f10850a57578e8ab6d2a386
- MD5 9a84f09732fa7ffaa9321d7867cb867c
- SHA1 ec554854e303631170a38112e39c0a85cf9fe4db
- SHA512 d55c3cca08db99cb5099feb6a3f0643ee3dbac0098462990274a91c95da75fe0e29192e2ec4f9e6d584163db3d22a74d9948041daef802574b81457d5a306371
- SSDEEP 786432:ySsYryxH5oShEJseU46HDx+FohNEgehFYLibtUtM:y/YKoapewYFohNEVP2iJUtM
- TLSH T13FA723C769E962ECD4D30640668E23CA65D1A57E45EADC3D3AC72C031930EBBC689D37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HWIDSPOOFER2.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
HWIDSPOOFER2.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target HWIDSPOOFER2.exe
- Size 42.4MB
- SHA256 e42f12c4d2eea54a5a12739452a9e47cfa8da2dc9f10850a57578e8ab6d2a386
- MD5 9a84f09732fa7ffaa9321d7867cb867c
- SHA1 ec554854e303631170a38112e39c0a85cf9fe4db
- SHA512 d55c3cca08db99cb5099feb6a3f0643ee3dbac0098462990274a91c95da75fe0e29192e2ec4f9e6d584163db3d22a74d9948041daef802574b81457d5a306371
- SSDEEP 786432:ySsYryxH5oShEJseU46HDx+FohNEgehFYLibtUtM:y/YKoapewYFohNEVP2iJUtM
- TLSH T13FA723C769E962ECD4D30640668E23CA65D1A57E45EADC3D3AC72C031930EBBC689D37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.