General
- Target sqlite.exe
- Size 12.6MB
- Sample260629-w4nknact9s
- SHA256 f5e579a2ceb1b6c96734419a4d5182d931926e31749b20de4fc4e43a00958517
- MD5 fd1a0bff71062dd1e4fdee83539b6681
- SHA1 72359dc97731763b9fd1f573b793ee4b03a9fd3e
- SHA512 a912e2cb46a7f9d151e7e9e81e3a2c021dc99a6bb965e8a788678d155426ef0cb96f98805f1d632bd8dcca273c8a387560b74cef25da84765c29f8bcde51409f
- SSDEEP 393216:xaKZnV6fKoRf0nBghMxa/3m+aUiHY0ZwwjeWA:jqC+uo3m1UiHY+wYlA
- TLSH T197D6339B2C708EFCF0035F70AA068109E5E65A9273B8CD650AC61DC8DBEB574C5F6792
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
sqlite.exe
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target sqlite.exe
- Size 12.6MB
- SHA256 f5e579a2ceb1b6c96734419a4d5182d931926e31749b20de4fc4e43a00958517
- MD5 fd1a0bff71062dd1e4fdee83539b6681
- SHA1 72359dc97731763b9fd1f573b793ee4b03a9fd3e
- SHA512 a912e2cb46a7f9d151e7e9e81e3a2c021dc99a6bb965e8a788678d155426ef0cb96f98805f1d632bd8dcca273c8a387560b74cef25da84765c29f8bcde51409f
- SSDEEP 393216:xaKZnV6fKoRf0nBghMxa/3m+aUiHY0ZwwjeWA:jqC+uo3m1UiHY+wYlA
- TLSH T197D6339B2C708EFCF0035F70AA068109E5E65A9273B8CD650AC61DC8DBEB574C5F6792
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory