General
- Target IsoGridShuffle.zip
- Size 19.7MB
- Sample260628-anfn8aew2j
- SHA256 b7502c53107f93a7c84877cd0be4a297c8cea39553a1f03ba90ef655626b4b09
- MD5 2e2fed438dd813713db959dec42305f2
- SHA1 94ea0b64a5e66d722131e84a1650e2d74e87318b
- SHA512 dd13ec4eb93ec59696dd419103b93829dd6c2a36c1048849437e0842deb3fd680ee0ef8cf9b25a44fa33b6cd5d94386fa11d0789c3dea912c791adbff13ea3a0
- SSDEEP 393216:29X5ER70RpuIQDvsU7Jr296SLSzNS4IW3gU78kT2bbHI5JL0sRCz/ZsgYNHAuSOf:2lpQvB1r2EnNS5G7CXuTRCyNgsf
- TLSH T1F62733609A39B4FF5A0DDB42D7216F077D08742EE407272A73F12E9A786512744CBA2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
IsoGridShuffle.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
IsoGridShuffle.dll
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Behavioral task
behavioral3
Sample
mnt/e/ISOKNOCK_2026/PROJECTS/iso-blob-ffgl/binaries/x64/Release/IsoGridShuffle.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
mnt/e/ISOKNOCK_2026/PROJECTS/iso-blob-ffgl/binaries/x64/Release/IsoGridShuffle.dll
Resource
win11ltsc2024-20260618-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target IsoGridShuffle.dll
- Size 25.6MB
- SHA256 9fef3f0351d42899f00f587f3550f2a5b6c0925cf77e5c74b7c5b7a75bb4640a
- MD5 39558cee7a0ab67de6136c92e6d5730f
- SHA1 9fc356a9a9cfd3eddd864a3619cb273b0d5a395e
- SHA512 6e96f6fb88f4ba6aa04684026ae762f0c9178e70b55f1f1191df3bafd1c3cd0b6ccbeeddce300d32ba1193b5224e4dfd477a696b11e57ed35f9f864b431277c1
- SSDEEP 196608:/+kmcr1QUxL5eUH/9dpKl2dfan874PUpV185TH2aqFn0AF:ffFzMUpV10WDFP
- TLSH T12D475BC3F0E67298C15F987442AAF763FA30381D51141AB397D1DD742ABAB80792AF17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target mnt/e/ISOKNOCK_2026/PROJECTS/iso-blob-ffgl/binaries/x64/Release/IsoGridShuffle.dll
- Size 25.6MB
- SHA256 55bb3c9f49c67d371ff1696fcb6c3e0ee46d52b9e8c4eeecab3d8dffc3665370
- MD5 481bd203e18b15e01f309c18eb3923c9
- SHA1 5c59c5d7523ef0d7ee273424409e1bc79a7693ac
- SHA512 a83ac9cc7160a381fc8ca64f65396b94cebb1d9644c96f4ea570ddc6240346a6a43bfdb31a6a965c1f7d549d5871bfc332138d4695dea055071d48f4a87b5dc4
- SSDEEP 196608:K+kmcr1QUxL5eUH/9dpKl2dfan874PUpV185TH2aqFn0AZ:CfFzMUpV10WDFP
- TLSH T1E5475BC3F0E67298C15F987442AAF763FA30381D51141AB397D1DD742ABAB80792AF17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10