General
- Target SSTool.exe
- Size 3.5MB
- Sample260702-a7ambaaw7s
- SHA256 47588aa374d2978f3e9b70829e53768a7359896b92858617a9e0d852a1d9c8d2
- MD5 4bd32558e5bb88cc8270fd246e3e7a51
- SHA1 d94655138c413c666f89b73a24ab206f926174a4
- SHA512 63296a36603fea7d86f21496d5c624f0a8e7386a9532e5e40f9676d67822ae9e5a62dcd2e867243827830639454dd2731adbb787101bbb75115ed294c8b0e74f
- SSDEEP 49152:L39xJXSAnTGmAH4Yk6UMrOyAA8ZRd0Rm/31Vw9MURQN914Y5vWMhbV/I0B1:L3u34eJO28ZRz31Va/RQpvtVwW
- TLSH T183062209F6D900F9D0BB9138C596991BFA72780507309ADB63F4056A2FAB2E45F3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SSTool.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
SSTool.exe
Resource
win11ltsc2024-20260630-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target SSTool.exe
- Size 3.5MB
- SHA256 47588aa374d2978f3e9b70829e53768a7359896b92858617a9e0d852a1d9c8d2
- MD5 4bd32558e5bb88cc8270fd246e3e7a51
- SHA1 d94655138c413c666f89b73a24ab206f926174a4
- SHA512 63296a36603fea7d86f21496d5c624f0a8e7386a9532e5e40f9676d67822ae9e5a62dcd2e867243827830639454dd2731adbb787101bbb75115ed294c8b0e74f
- SSDEEP 49152:L39xJXSAnTGmAH4Yk6UMrOyAA8ZRd0Rm/31Vw9MURQN914Y5vWMhbV/I0B1:L3u34eJO28ZRz31Va/RQpvtVwW
- TLSH T183062209F6D900F9D0BB9138C596991BFA72780507309ADB63F4056A2FAB2E45F3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.