General
- Target 2026-07-01_47f33d2758f24235603273a613bab1a1_hive
- Size 2.0MB
- Sample260701-lzmgpadt71
- SHA256 aeb0b10c19d6547ef5357b11090c163174efc771cd81e9f18adb5959255e9290
- MD5 47f33d2758f24235603273a613bab1a1
- SHA1 5485a0403ea1094d45e558a56a1c6e99b70e26e3
- SHA512 cff5f45a5fc568a03cd684588a0b3ed0a1a1e59712c09e638cb76ed1c72ffb83335da11f5bd9e70a8e18b18c49a3c8233c0f5ce66fdfb1583efab7c7a28fd13c
- SSDEEP 49152:5luvQ74+Xw52GVAa6lB1zh2WePH94lw32TD1DwRY1+SU:5luvkHW2GOa6lB2We/6u32Tg
- TLSH T1C895337266BEFE94E7782730880E3BDF37EA46E9807142799609A023F2418915571FF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-01_47f33d2758f24235603273a613bab1a1_hive.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_47f33d2758f24235603273a613bab1a1_hive.exe
Resource
win11ltsc2024-20260629-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_47f33d2758f24235603273a613bab1a1_hive
- Size 2.0MB
- SHA256 aeb0b10c19d6547ef5357b11090c163174efc771cd81e9f18adb5959255e9290
- MD5 47f33d2758f24235603273a613bab1a1
- SHA1 5485a0403ea1094d45e558a56a1c6e99b70e26e3
- SHA512 cff5f45a5fc568a03cd684588a0b3ed0a1a1e59712c09e638cb76ed1c72ffb83335da11f5bd9e70a8e18b18c49a3c8233c0f5ce66fdfb1583efab7c7a28fd13c
- SSDEEP 49152:5luvQ74+Xw52GVAa6lB1zh2WePH94lw32TD1DwRY1+SU:5luvkHW2GOa6lB2We/6u32Tg
- TLSH T1C895337266BEFE94E7782730880E3BDF37EA46E9807142799609A023F2418915571FF7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Scheduled Task/Job
1Scheduled Task
1