General
- Target 9279890a94fce985fa4deca7cb9d2d08e1db8ed60f5ab2e50d7a52dbd0a44830.zip
- Size 485KB
- Sample260701-qmskdshs2w
- SHA256 0f54463f75ae79a5f52c81848b52c3ea002821792a34f06786f44b1bedef3263
- MD5 a5eb6f61e87a8a90c30a28e48080edd4
- SHA1 3c20da02219e481c4a108bedb98ed07ca136b3e4
- SHA512 95dc6a7bdad8660e224b9be8d3b5d3278f6be4fe196c13a4c7b1b7930dbd548b57304d2ef83f96ec06fca0a933afef5d1d408aa9f3fc631128946dd48ba92bc5
- SSDEEP 12288:vtWMbyAZBvtlJZFEl93U1S81E582ygYNL+mrBAx6cvhHiPlcNG:vcMbysBvt7Zelm1S8G58vz2scvhHiPmG
- TLSH T128B423D8F92F77D4C86FC84E3CD8DEEACBC94A8647B6373E8A04241BA445604BD51D51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
9279890a94fce985fa4deca7cb9d2d08e1db8ed60f5ab2e50d7a52dbd0a44830.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
9279890a94fce985fa4deca7cb9d2d08e1db8ed60f5ab2e50d7a52dbd0a44830.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 9279890a94fce985fa4deca7cb9d2d08e1db8ed60f5ab2e50d7a52dbd0a44830
- Size 794KB
- SHA256 9279890a94fce985fa4deca7cb9d2d08e1db8ed60f5ab2e50d7a52dbd0a44830
- MD5 a9d8ac5047d91273ca5a2209e9eac7ed
- SHA1 13ba5785ff25b78ae208163aa21604de40e0039c
- SHA512 4bc1f2ad88bf9b3c37b3a36a5ed7a9799bc86806c32a989ab02848885ab82b0d1a449b0ad8600763e79e42589f3b9c9d595a5c3df57daecaf4d70dc232162101
- SSDEEP 12288:YnrePWUGAJzhk+goKITpz/bSePLQiEBltsVy6Wy4S3:YrCWUGP+gITpj2E7s0VyxyJ
- TLSH T15405AEE5795E7ABBC00A1CBA8E568E6274EC57B187504C93FFD53EBA4910CC31623932
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.