General
- Target missisipi.txt
- Size 17B
- Sample260701-hm3rcsaw3x
- SHA256 cd6feeb008db3efa4fc8cd93df6dd7f207de1af3a6f845fc2e85f1754f642055
- MD5 fcbe8b23a106753f84c87c653ebfae4d
- SHA1 cbaa7399a530d5cb9ceb9c7c92778bbba7214b5e
- SHA512 80441bcc9143bed5924e5d8bd07774aa17cc740cef1fa0313cb2100fcd54deb30faef300718880f803d6366250cd757e4336071796bc943c901672f96e091ee0
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
missisipi.txt
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
missisipi.txt
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target missisipi.txt
- Size 17B
- SHA256 cd6feeb008db3efa4fc8cd93df6dd7f207de1af3a6f845fc2e85f1754f642055
- MD5 fcbe8b23a106753f84c87c653ebfae4d
- SHA1 cbaa7399a530d5cb9ceb9c7c92778bbba7214b5e
- SHA512 80441bcc9143bed5924e5d8bd07774aa17cc740cef1fa0313cb2100fcd54deb30faef300718880f803d6366250cd757e4336071796bc943c901672f96e091ee0
- MD5 SHA1 SHA512
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.