General
- Target laa_daorigins.exe
- Size 9.2MB
- Sample260629-1qa5maf12t
- SHA256 b042358afa02d3a1a7384b0628103eadf4da4d46ea05e86d7ba59b785a6694f9
- MD5 64ad35590e1d491f49209dcbbc4b99cc
- SHA1 bc845c1a03815c984b49b57c4c6173c5e0b26e78
- SHA512 c227c44b28b41f741f269e417261d2cfe7282a281c53a7f6859c162379e26b74df2d029d29c52851dee71a97b9d409b6215b124042c1a9300fda220e4745d705
- SSDEEP 196608:mGybc0Oiw2BcuzT6inq6Zh1AW6bnhlg71DscVGtCrF:1ybc0LwucBiq6N0b7gzVGA
- TLSH T1E8A68E52FBCEC1B5CF4B25B404A6962E9225DB440B345AE776643F0FAE716D03C362CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
laa_daorigins.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
laa_daorigins.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target laa_daorigins.exe
- Size 9.2MB
- SHA256 b042358afa02d3a1a7384b0628103eadf4da4d46ea05e86d7ba59b785a6694f9
- MD5 64ad35590e1d491f49209dcbbc4b99cc
- SHA1 bc845c1a03815c984b49b57c4c6173c5e0b26e78
- SHA512 c227c44b28b41f741f269e417261d2cfe7282a281c53a7f6859c162379e26b74df2d029d29c52851dee71a97b9d409b6215b124042c1a9300fda220e4745d705
- SSDEEP 196608:mGybc0Oiw2BcuzT6inq6Zh1AW6bnhlg71DscVGtCrF:1ybc0LwucBiq6N0b7gzVGA
- TLSH T1E8A68E52FBCEC1B5CF4B25B404A6962E9225DB440B345AE776643F0FAE716D03C362CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.