General
- Target 3d5682f1b07e7ee94e2d6feba540b870534c3cf1b419a9b3a156d2306fff1264.exe
- Size 1.4MB
- Sample260702-lesszadw4j
- SHA256 3d5682f1b07e7ee94e2d6feba540b870534c3cf1b419a9b3a156d2306fff1264
- MD5 3eb48981c95d8b396cf62dfdec937662
- SHA1 b48eb5661eca92b70cafc810baad005e9f1450fb
- SHA512 d4441bbad2f85956656055fb39aa84b0b3a474b6b55b8d5df12e0888a1a08b39a1c51741e1ed2ed6d1b44eb698db9d8362600c0d250b6fb0befdfa4347df2dee
- SSDEEP 24576:tqylFH50Dv6RwyeQvt6ot0h9HyrOliruArnAh:gylFHUv6ReIt0jSrO
- TLSH T16C657D12B25DC2B1D19C157039AF7736A934A62A1B35CAD3B7E0CD7C1E327D1AA37209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
3d5682f1b07e7ee94e2d6feba540b870534c3cf1b419a9b3a156d2306fff1264.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
3d5682f1b07e7ee94e2d6feba540b870534c3cf1b419a9b3a156d2306fff1264.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 3d5682f1b07e7ee94e2d6feba540b870534c3cf1b419a9b3a156d2306fff1264.exe
- Size 1.4MB
- SHA256 3d5682f1b07e7ee94e2d6feba540b870534c3cf1b419a9b3a156d2306fff1264
- MD5 3eb48981c95d8b396cf62dfdec937662
- SHA1 b48eb5661eca92b70cafc810baad005e9f1450fb
- SHA512 d4441bbad2f85956656055fb39aa84b0b3a474b6b55b8d5df12e0888a1a08b39a1c51741e1ed2ed6d1b44eb698db9d8362600c0d250b6fb0befdfa4347df2dee
- SSDEEP 24576:tqylFH50Dv6RwyeQvt6ot0h9HyrOliruArnAh:gylFHUv6ReIt0jSrO
- TLSH T16C657D12B25DC2B1D19C157039AF7736A934A62A1B35CAD3B7E0CD7C1E327D1AA37209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.