General
- Target 2026-06-26_d68fd063f5d633ef4f9c5ef24ada9b7d_mespinoza
- Size 1.3MB
- Sample260629-n4hemset2k
- SHA256 3804115000b388e56519479578975b6647eef7fc83c81bcc10a9362262321f03
- MD5 d68fd063f5d633ef4f9c5ef24ada9b7d
- SHA1 71c72595c52fc203e46c82b34a8fb3ea4e39be1f
- SHA512 7a1612b66f11a8ead9329ccac8ae53a0e48cfaaf1d6aafac31a3d8593489fbcb714eb12584b1c916b7be1c073b8a3f3463c691a9fbac6634dd5c40321ee3686f
- SSDEEP 12288:tEFCZoG/Mc+Hs9U+EFiSbg+N/ld5lVvYRMFlvZrSr:0G/2+67L5lkoZrSr
- TLSH T17955D541B6A80495FCAE9D7489668675FA32BD9F3E2DB20F1C50B22F1F338D05E25721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_d68fd063f5d633ef4f9c5ef24ada9b7d_mespinoza.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_d68fd063f5d633ef4f9c5ef24ada9b7d_mespinoza.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_d68fd063f5d633ef4f9c5ef24ada9b7d_mespinoza
- Size 1.3MB
- SHA256 3804115000b388e56519479578975b6647eef7fc83c81bcc10a9362262321f03
- MD5 d68fd063f5d633ef4f9c5ef24ada9b7d
- SHA1 71c72595c52fc203e46c82b34a8fb3ea4e39be1f
- SHA512 7a1612b66f11a8ead9329ccac8ae53a0e48cfaaf1d6aafac31a3d8593489fbcb714eb12584b1c916b7be1c073b8a3f3463c691a9fbac6634dd5c40321ee3686f
- SSDEEP 12288:tEFCZoG/Mc+Hs9U+EFiSbg+N/ld5lVvYRMFlvZrSr:0G/2+67L5lkoZrSr
- TLSH T17955D541B6A80495FCAE9D7489668675FA32BD9F3E2DB20F1C50B22F1F338D05E25721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.