General
- Target d1wngb.exe
- Size 62.9MB
- Sample260628-mm5ceagv9v
- SHA256 ebaf5aded88ec40f16f1448586633ff44d907abb2d8990cb52ba7f6a6e405831
- MD5 3dbd4dbbe24685648ca5ae7e751cef46
- SHA1 f5858f1a4afc204841ed284117b99fa3c7f447ee
- SHA512 c6aef5ef18d94543297abbe72e30b76fbbade6b14695893baef7b8d22133d241b2bcbac3aabacc71e49622655c5d1bd245bc1e8a84d8f6b0da1c483e5b5458a1
- SSDEEP 1572864:EAb5tU/EvsBLTW4qIIbDNCRJ062JC3JuuODB7SUOTa1WN:EAb5tUesoaI/NS2KJ0DUUaa12
- TLSH T113E73337E149623AE0AA2B355FB2A124883B56515D828D1FD7FC319CCB356303E7B297
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
d1wngb.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
d1wngb.exe
Resource
win11ltsc2024-20260617-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target d1wngb.exe
- Size 62.9MB
- SHA256 ebaf5aded88ec40f16f1448586633ff44d907abb2d8990cb52ba7f6a6e405831
- MD5 3dbd4dbbe24685648ca5ae7e751cef46
- SHA1 f5858f1a4afc204841ed284117b99fa3c7f447ee
- SHA512 c6aef5ef18d94543297abbe72e30b76fbbade6b14695893baef7b8d22133d241b2bcbac3aabacc71e49622655c5d1bd245bc1e8a84d8f6b0da1c483e5b5458a1
- SSDEEP 1572864:EAb5tU/EvsBLTW4qIIbDNCRJ062JC3JuuODB7SUOTa1WN:EAb5tUesoaI/NS2KJ0DUUaa12
- TLSH T113E73337E149623AE0AA2B355FB2A124883B56515D828D1FD7FC319CCB356303E7B297
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Adds Run key to start application
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1