General
- Target 2026-06-26_563dda43e0e95a7c296bd21a53a6e62d_mespinoza
- Size 775KB
- Sample260629-tcrf5ahs4w
- SHA256 bd1a9967648948c4be32b8919bf87de5cd883d53534e18d56286d29c036803c2
- MD5 563dda43e0e95a7c296bd21a53a6e62d
- SHA1 265cf1bc25ccbec2bd67d409c14b76abab24da93
- SHA512 e33a08135b08591c0161cd29e9ea1d38cc5cdde1b1be6852a6721f3ae2b25bb4b90a8f64d074f4f6685bddad1b00e94438b2e6de1b6bc7705e57688a1ed948b1
- SSDEEP 6144:fx+s9imdfsnc91Vr97MKNRneNMToeGYnYnoLslAvm:fQs9V8c/TcCYowqO
- TLSH T168F4513375A91848FD0E2DF48581B234F321ACAF3E4F7A8ADC48760E99776D23C59166
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_563dda43e0e95a7c296bd21a53a6e62d_mespinoza.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_563dda43e0e95a7c296bd21a53a6e62d_mespinoza.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_563dda43e0e95a7c296bd21a53a6e62d_mespinoza
- Size 775KB
- SHA256 bd1a9967648948c4be32b8919bf87de5cd883d53534e18d56286d29c036803c2
- MD5 563dda43e0e95a7c296bd21a53a6e62d
- SHA1 265cf1bc25ccbec2bd67d409c14b76abab24da93
- SHA512 e33a08135b08591c0161cd29e9ea1d38cc5cdde1b1be6852a6721f3ae2b25bb4b90a8f64d074f4f6685bddad1b00e94438b2e6de1b6bc7705e57688a1ed948b1
- SSDEEP 6144:fx+s9imdfsnc91Vr97MKNRneNMToeGYnYnoLslAvm:fQs9V8c/TcCYowqO
- TLSH T168F4513375A91848FD0E2DF48581B234F321ACAF3E4F7A8ADC48760E99776D23C59166
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.