General
- Target hwid_tool.exe
- Size 1.0MB
- Sample260629-ewcdzsd15m
- SHA256 9cdb3d8a0b2559b16ac7a4debf5be9f0976e72faadf89b31c88ba97a4a2ae100
- MD5 3e0d41f4ef7301896f008bb0fa6de523
- SHA1 e6d31e63f2bcd9a20658fd71d8612b6f37a38bee
- SHA512 808b1e6d24a3de5d9d50d88f68de2e955210178682964e6cd9cc6fb2fde13a56a45bebd32189634878919584868db5272a90173dd5370cc234869a2630d2a210
- SSDEEP 24576:B27tZztBg3ldB44Bto5d9ML5XG1jiNno6z:IZB0+4Ur22+Nnnz
- TLSH T15225AE46B2A401FDD06BE178CA959A0BEA75384507709ADF13E01B952FB36F05FBB312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
hwid_tool.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target hwid_tool.exe
- Size 1.0MB
- SHA256 9cdb3d8a0b2559b16ac7a4debf5be9f0976e72faadf89b31c88ba97a4a2ae100
- MD5 3e0d41f4ef7301896f008bb0fa6de523
- SHA1 e6d31e63f2bcd9a20658fd71d8612b6f37a38bee
- SHA512 808b1e6d24a3de5d9d50d88f68de2e955210178682964e6cd9cc6fb2fde13a56a45bebd32189634878919584868db5272a90173dd5370cc234869a2630d2a210
- SSDEEP 24576:B27tZztBg3ldB44Bto5d9ML5XG1jiNno6z:IZB0+4Ur22+Nnnz
- TLSH T15225AE46B2A401FDD06BE178CA959A0BEA75384507709ADF13E01B952FB36F05FBB312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.