General
- Target Arc.exe
- Size 10.2MB
- Sample260702-3b92hsc13p
- SHA256 d5c2b7920b58cc41b6b6f8762ee546121961d7ac792523b17244d919c245adbd
- MD5 e46c6f96b3f5df518e8ba94c5b11ca8b
- SHA1 a6a108233b984b3286dad2e020b0d0d3f35eb336
- SHA512 083ad154cde3760b8f5c3c57b85a19b7a0aecb39b29680470f5d564e44c5c8309096b64655607a9e388e796b399abde0a455bddf3be0843180a1fcc109727b7d
- SSDEEP 196608:13LzmBge2I+KmC9B829lb8okRO09f2VQbHQaHTGQQL8kKNZ/t4Ny6:NmTPmC9B823z2O27wazG7oHCy6
- TLSH T155B633DFB18A3594CD83DCB67E7292D6B383225498BE482533C97F411D63C2B6AC9325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Arc.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
Arc.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target Arc.exe
- Size 10.2MB
- SHA256 d5c2b7920b58cc41b6b6f8762ee546121961d7ac792523b17244d919c245adbd
- MD5 e46c6f96b3f5df518e8ba94c5b11ca8b
- SHA1 a6a108233b984b3286dad2e020b0d0d3f35eb336
- SHA512 083ad154cde3760b8f5c3c57b85a19b7a0aecb39b29680470f5d564e44c5c8309096b64655607a9e388e796b399abde0a455bddf3be0843180a1fcc109727b7d
- SSDEEP 196608:13LzmBge2I+KmC9B829lb8okRO09f2VQbHQaHTGQQL8kKNZ/t4Ny6:NmTPmC9B823z2O27wazG7oHCy6
- TLSH T155B633DFB18A3594CD83DCB67E7292D6B383225498BE482533C97F411D63C2B6AC9325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger