General
- Target IPTool.exe
- Size 93KB
- Sample260701-fb9dnagv4y
- SHA256 e552de1a4fbcc02d6cebe47ea2dd60fedb6aed339d5b6ee745b31897584c1b21
- MD5 0f86ea1db474a3738d6da56797ca929c
- SHA1 f76b239780081572bc71c6e6066cb6d0609eb0f9
- SHA512 c40899d97e491b8679860ec4a1cfa1bc0cd06d193f7e98ec5e6f31926d2140b8c78e437d1e04c57568fedc7b7d4760396038df09f2efcee5519e442fbb2d9fea
- SSDEEP 1536:n7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfyw6/rWNCOe:77DhdC6kzWypvaQ0FxyNTBfyfe4
- TLSH T1E9937C41F3E142F7EAF2053100A6722F9736A3389724ACDBC75C2D529913AD1A63D3E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
IPTool.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
IPTool.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target IPTool.exe
- Size 93KB
- SHA256 e552de1a4fbcc02d6cebe47ea2dd60fedb6aed339d5b6ee745b31897584c1b21
- MD5 0f86ea1db474a3738d6da56797ca929c
- SHA1 f76b239780081572bc71c6e6066cb6d0609eb0f9
- SHA512 c40899d97e491b8679860ec4a1cfa1bc0cd06d193f7e98ec5e6f31926d2140b8c78e437d1e04c57568fedc7b7d4760396038df09f2efcee5519e442fbb2d9fea
- SSDEEP 1536:n7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfyw6/rWNCOe:77DhdC6kzWypvaQ0FxyNTBfyfe4
- TLSH T1E9937C41F3E142F7EAF2053100A6722F9736A3389724ACDBC75C2D529913AD1A63D3E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.