General
- Target Madium.zip
- Size 11.7MB
- Sample260628-v3z2maax7k
- SHA256 e3c2604d127761a550db6030312749434f4628c80fedaeb2bd569712939d9732
- MD5 2e4510073021a28b7819e0f302700e2c
- SHA1 c1f5c2234bff5d01f3d59d12126f1a3b2ff81aa0
- SHA512 d585ef42ae27b0b3fe549dd2eff4bfc7108e1c0eff962ac0b478872bcb0185cdae9ca52fd4f2caba4e0a80e7efedf68ceb0f081e97070156a9bf5ca119dc8001
- SSDEEP 196608:aMgdrnI91A+7an1JWA5yLXmnKAmuJ69SPbtMG+IXJvQ0AIRRdawCOMPnbZwxT/Uj:aV019en1QA5d1muA9SPbtMG+IXJvPc4s
- TLSH T1BFC633E961782EF1C6893313264266D3A28D90D6CAE55FB6DE043766BD34FE4248FC34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Madium-Installer.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Madium-Installer.exe
Resource
win11ltsc2024-20260618-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Madium-Installer.exe
- Size 13.0MB
- SHA256 2ee90a1ea33cabb04324c4c81fbf5e10324555daa15a5ce1cca057c12e61b096
- MD5 b6a989ca0e54d320516e476952805cd0
- SHA1 f2aca808016392bef6bbfdc9e71cd008a0d4b408
- SHA512 fdb50952943a16ed4e809f1fd804cbac63e5cf63cdc9fa9b2a5f62492839af3b79491204b34316b13d82a2e2f8e38ff5e523976e0e02cf408cdd9a962273dff5
- SSDEEP 393216:QkRpe9nk411ZUSKpWVbjkWMWt+bT4OwGe0HTr:RRpe9nk4/ZaWeWZiMiH
- TLSH T16AD623ED80E523E4D8C30A80778A53CE70D0659D45FD5C297AEA2C02AF21DAF564EDB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.