General
- Target 2b950d58b52546b521f721d8c45a69eb4d7cf5859861c1d934070ee26ab95e0e.docx
- Size 347KB
- Sample260702-mkcjlsf14x
- SHA256 2b950d58b52546b521f721d8c45a69eb4d7cf5859861c1d934070ee26ab95e0e
- MD5 aad3a0b48182b308a50d07dfbac6ddee
- SHA1 eba3f615f6078a706f7f671d777b176b404af7de
- SHA512 e13c28ec450601a217b58300bce1bc58a920551d214f7f02969d69112df56b74c32f72169ff7d0d443644121897368066ba2af24cad74354b469ba5329c01ec9
- SSDEEP 6144:QeezDC0VPkUDDgQmrWNqycfTcrGXZchJyWgBuzScEtI9fTBkfzS:ICOPkUDDgQmr3ycfeCZchJcB4SF299sm
- TLSH T1737412289A4B2171CD63077B6F6D4A6A02DE07D88279B21E29CDF5D0CF472B3C5B5D22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
2b950d58b52546b521f721d8c45a69eb4d7cf5859861c1d934070ee26ab95e0e.docx
Resource
win10v2004-20260513-en
5 signatures
40 seconds
Behavioral task
behavioral2
Sample
2b950d58b52546b521f721d8c45a69eb4d7cf5859861c1d934070ee26ab95e0e.docx
Resource
win11ltsc2024-20260629-en
15 signatures
40 seconds
Malware Config
Targets
-
- Target 2b950d58b52546b521f721d8c45a69eb4d7cf5859861c1d934070ee26ab95e0e.docx
- Size 347KB
- SHA256 2b950d58b52546b521f721d8c45a69eb4d7cf5859861c1d934070ee26ab95e0e
- MD5 aad3a0b48182b308a50d07dfbac6ddee
- SHA1 eba3f615f6078a706f7f671d777b176b404af7de
- SHA512 e13c28ec450601a217b58300bce1bc58a920551d214f7f02969d69112df56b74c32f72169ff7d0d443644121897368066ba2af24cad74354b469ba5329c01ec9
- SSDEEP 6144:QeezDC0VPkUDDgQmrWNqycfTcrGXZchJyWgBuzScEtI9fTBkfzS:ICOPkUDDgQmr3ycfeCZchJcB4SF299sm
- TLSH T1737412289A4B2171CD63077B6F6D4A6A02DE07D88279B21E29CDF5D0CF472B3C5B5D22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.