General
- Target 8BallPoolModMenu.exe
- Size 11.3MB
- Sample260701-pceecafw3t
- SHA256 46af02bed6fe06ce0ca7640eb4ae67837cc96c53c60f5e6c67159a33023fb48e
- MD5 5848db1a4b0d5c8b6adc8bcbaaf943c0
- SHA1 45a752ff2575ebc7f6b59f6a6be202d46955847d
- SHA512 a1692c0ff5f76cf3bfe7982dff92bd868031edfc71f67358642b1ed0f50f3a5261dad715a36d5620a600ff247b501a52ae44fca0e40d6201f8bb37f1a9950dc6
- SSDEEP 196608:ZNlZef/QEsa1rUZIxXmSADylESFjHPUe1H549Uz52HxpAjeGYYd:ZNlI/QEH1r0IxXmMNhUe1Zy277Nd
- TLSH T1A3C612E77B9482B5C0420D308559C3E97391FD0C85A84B1739D76E07BE98CEB2D4ABE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8BallPoolModMenu.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8BallPoolModMenu.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 8BallPoolModMenu.exe
- Size 11.3MB
- SHA256 46af02bed6fe06ce0ca7640eb4ae67837cc96c53c60f5e6c67159a33023fb48e
- MD5 5848db1a4b0d5c8b6adc8bcbaaf943c0
- SHA1 45a752ff2575ebc7f6b59f6a6be202d46955847d
- SHA512 a1692c0ff5f76cf3bfe7982dff92bd868031edfc71f67358642b1ed0f50f3a5261dad715a36d5620a600ff247b501a52ae44fca0e40d6201f8bb37f1a9950dc6
- SSDEEP 196608:ZNlZef/QEsa1rUZIxXmSADylESFjHPUe1H549Uz52HxpAjeGYYd:ZNlI/QEH1r0IxXmMNhUe1Zy277Nd
- TLSH T1A3C612E77B9482B5C0420D308559C3E97391FD0C85A84B1739D76E07BE98CEB2D4ABE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.