General
- Target 2026-07-02_0f27f9f0492224f4e8163595bf34a871_mespinoza
- Size 1.3MB
- Sample260702-1bs2wsfs8z
- SHA256 48b8a987e2e0e204eff6693ae30a5f902ea7cdb3ad29d086650355242db60640
- MD5 0f27f9f0492224f4e8163595bf34a871
- SHA1 118ec4d680c49679d2f5f81c5c4921d007f3d442
- SHA512 94d99ba0711924eefd055ae4de58055776a399112fcf6d5db2d60d9d50e9b83d2d15157e4a5737bea75aeafc668fb955fb940e0f553c5376a35b60efb2d6d4f4
- SSDEEP 12288:yagAlbGf+zWls9K8nKwi1AN1ld5lVvYRMFlvZ5r1s:vGfN8KR65lkoZ5Zs
- TLSH T18A55C541B6A80495FCAE9D7489668675FA32BD9F3E2DB30F1C50B22F1E338D05E25721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_0f27f9f0492224f4e8163595bf34a871_mespinoza.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_0f27f9f0492224f4e8163595bf34a871_mespinoza.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_0f27f9f0492224f4e8163595bf34a871_mespinoza
- Size 1.3MB
- SHA256 48b8a987e2e0e204eff6693ae30a5f902ea7cdb3ad29d086650355242db60640
- MD5 0f27f9f0492224f4e8163595bf34a871
- SHA1 118ec4d680c49679d2f5f81c5c4921d007f3d442
- SHA512 94d99ba0711924eefd055ae4de58055776a399112fcf6d5db2d60d9d50e9b83d2d15157e4a5737bea75aeafc668fb955fb940e0f553c5376a35b60efb2d6d4f4
- SSDEEP 12288:yagAlbGf+zWls9K8nKwi1AN1ld5lVvYRMFlvZ5r1s:vGfN8KR65lkoZ5Zs
- TLSH T18A55C541B6A80495FCAE9D7489668675FA32BD9F3E2DB30F1C50B22F1E338D05E25721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.