General
- Target dup2patcher.dll
- Size 174KB
- Sample260702-3flvgsc14r
- SHA256 8227cd4672b2c716f208c4b6804352b8a1a12f50cd85ab30ecb0ce96e45bb417
- MD5 f6ef4fdff0ff80644af13f07cc011442
- SHA1 8399830a968290d9757096b9b58e9c0147224f5d
- SHA512 ce710e538bc2109ca7c0549f52123511eb6c86265cffeaa254f4df9c3255baf1f299682f2710555626352155d5a86a20c2b72c22159fd7e6e48d636c65b564b1
- SSDEEP 3072:9Hq3pkWVZkgtuW8VTBZaVJHXa4xg1oMFBKf+32HQA6v3:AkWhtuW8V9ZaVJrg1lrg76v
- TLSH T1F9041229F3E8626AF5C00E756A7B8788B3A1BF15599147721ED9331F7D3480A4A0E34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dup2patcher.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
dup2patcher.dll
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target dup2patcher.dll
- Size 174KB
- SHA256 8227cd4672b2c716f208c4b6804352b8a1a12f50cd85ab30ecb0ce96e45bb417
- MD5 f6ef4fdff0ff80644af13f07cc011442
- SHA1 8399830a968290d9757096b9b58e9c0147224f5d
- SHA512 ce710e538bc2109ca7c0549f52123511eb6c86265cffeaa254f4df9c3255baf1f299682f2710555626352155d5a86a20c2b72c22159fd7e6e48d636c65b564b1
- SSDEEP 3072:9Hq3pkWVZkgtuW8VTBZaVJHXa4xg1oMFBKf+32HQA6v3:AkWhtuW8V9ZaVJrg1lrg76v
- TLSH T1F9041229F3E8626AF5C00E756A7B8788B3A1BF15599147721ED9331F7D3480A4A0E34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.