General
- Target aciboostersmile2.exe
- Size 264KB
- Sample260630-br4e5acw9n
- SHA256 0ceba1207f5d6fa424fc5b7c1f91421e049bbff4bbe49afa062758f5d338f7d8
- MD5 f16c4ce124c041de93847dd59fa25e1f
- SHA1 b021a87f37136c5697edb6355e931c74e9762c31
- SHA512 775c41ce308412861191672907b0d3304718709aa395087388b3d219d473957344fc8508935445c2e01a36e18b7f9b47105079539de6bb5a300cb8ae5db77c38
- SSDEEP 6144:xAEAeSLvdjnB7u3EbyC+PGzQJyldVka38e1/tgI27vzaeeW:yDLvd13XzQJyldV3R27vzaeeW
- TLSH T101445D143A95CD17F22F6FF8D15074BA4B759103E946F38E1CA9C1D81A06B83B88A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aciboostersmile2.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
aciboostersmile2.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target aciboostersmile2.exe
- Size 264KB
- SHA256 0ceba1207f5d6fa424fc5b7c1f91421e049bbff4bbe49afa062758f5d338f7d8
- MD5 f16c4ce124c041de93847dd59fa25e1f
- SHA1 b021a87f37136c5697edb6355e931c74e9762c31
- SHA512 775c41ce308412861191672907b0d3304718709aa395087388b3d219d473957344fc8508935445c2e01a36e18b7f9b47105079539de6bb5a300cb8ae5db77c38
- SSDEEP 6144:xAEAeSLvdjnB7u3EbyC+PGzQJyldVka38e1/tgI27vzaeeW:yDLvd13XzQJyldV3R27vzaeeW
- TLSH T101445D143A95CD17F22F6FF8D15074BA4B759103E946F38E1CA9C1D81A06B83B88A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.