General
- Target flightgear-2024.1.6-windows-amd64.exe
- Size 79.3MB
- Sample260702-hdvpdsdt2w
- SHA256 e3d996a55a284cf59f7bf4acb53fe317d8d27004ce634291c3ee501ac27b4ba2
- MD5 d78b94682024b427338f62f1ddc962f3
- SHA1 ebeef93d24a3e469cf7aba17dc400dbfe9237258
- SHA512 5579dd034cc4f670fcfc3889ae50fe1671a47efa6e6ba59b3f1582d7117bae9b46dcf551f3cee905d2f91a8af35ef6cef30d5bfd8f14e9d22edabfd46a799a27
- SSDEEP 1572864:SvOJe+vzlo+vipojj35PHpNaM0sv0K274VLGHscNWY6UVs02XO4:iz+vzlv6poX5PHpNaNssk0scBy3
- TLSH T1CD08333F71CA28EDD06D02FA797ADE7058777A141543C812E2F5889EEB5F0B01B3A586
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target flightgear-2024.1.6-windows-amd64.exe
- Size 79.3MB
- SHA256 e3d996a55a284cf59f7bf4acb53fe317d8d27004ce634291c3ee501ac27b4ba2
- MD5 d78b94682024b427338f62f1ddc962f3
- SHA1 ebeef93d24a3e469cf7aba17dc400dbfe9237258
- SHA512 5579dd034cc4f670fcfc3889ae50fe1671a47efa6e6ba59b3f1582d7117bae9b46dcf551f3cee905d2f91a8af35ef6cef30d5bfd8f14e9d22edabfd46a799a27
- SSDEEP 1572864:SvOJe+vzlo+vipojj35PHpNaM0sv0K274VLGHscNWY6UVs02XO4:iz+vzlv6poX5PHpNaNssk0scBy3
- TLSH T1CD08333F71CA28EDD06D02FA797ADE7058777A141543C812E2F5889EEB5F0B01B3A586
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory