General
- Target HWIDSPOOFER.exe
- Size 37.5MB
- Sample260701-tr4d8sbw6x
- SHA256 15218cb37f46f552a0358bc23b43bfff34b6a8902d39d923327f829eae1af3f7
- MD5 a8b21c4413407297bb7384dab39509c4
- SHA1 d2d1157e390880365ee647cd4b1339a75ff4ec64
- SHA512 4d3a75f575e1b0b785af0e3c1ce669578000b72310469f2638bcff5eace37179b2d07ecf7b60f0433fa62138b08a647f186fc62b2d9f04bf5ac326c350a0adac
- SSDEEP 786432:Bt2+OZU7/wEk3iwVkekmmG3rSVZeJb3GRxlS:t7/q35T4ZCabl
- TLSH T1298723DB91EA63D8D8C35844A58E50C775C164BFC6FE89182ECF5C023164D6A8A8EF73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HWIDSPOOFER.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
HWIDSPOOFER.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target HWIDSPOOFER.exe
- Size 37.5MB
- SHA256 15218cb37f46f552a0358bc23b43bfff34b6a8902d39d923327f829eae1af3f7
- MD5 a8b21c4413407297bb7384dab39509c4
- SHA1 d2d1157e390880365ee647cd4b1339a75ff4ec64
- SHA512 4d3a75f575e1b0b785af0e3c1ce669578000b72310469f2638bcff5eace37179b2d07ecf7b60f0433fa62138b08a647f186fc62b2d9f04bf5ac326c350a0adac
- SSDEEP 786432:Bt2+OZU7/wEk3iwVkekmmG3rSVZeJb3GRxlS:t7/q35T4ZCabl
- TLSH T1298723DB91EA63D8D8C35844A58E50C775C164BFC6FE89182ECF5C023164D6A8A8EF73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.