General
- Target 25333491325.zip
- Size 125KB
- Sample260702-pg7lpah15s
- SHA256 b28c86f908176c2f06a616243dfc12524cd219dd0898c1ea3be758ef2592de3c
- MD5 0f2a367dc645e5e09b335f126c1dbc61
- SHA1 ceff80f095e85b07fedcd3fbc314b29415f297bc
- SHA512 3b84fc2f281599f1fb5a96d7ca0be9a0c0ecfb594df18c0bced088def8b819bcf7f417e03c9b97f2bf44765f262040c3933d40903f53ffdb6525a5f02ac9c87f
- SSDEEP 3072:1Se48FIyYQLqVjefBqVro+nu8G8lJtxY1TNRJB:1STMIyYQ4afB8m0t61T7T
- TLSH T173C312A9B352A5B2D0C49FA0E2056A3D151EF7933340B4BCD60AC211DEECB1900FFAE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Tax_Assessment.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Tax_Assessment.exe
Resource
win11ltsc2024-20260629-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
libsvcs.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
libsvcs.dll
Resource
win11ltsc2024-20260630-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target Tax_Assessment.exe
- Size 95KB
- SHA256 4b5405d9acd00dd9225ffcec840a1752951be801d20ee1cab4ebde9ccd96916a
- MD5 ac08e8f463e0fa4a431b74fd5d7f01a1
- SHA1 721dae8c5e4d71e1f83f6b9e64dcb1b111e6889b
- SHA512 9764826b3f6c6d33a0681a9792ff9ae393a010190d9887b45c91ef0098aacad9e9f8f8e5b7d5e6466e481bd136a898fbf2ae254dadb4b6a4f68aa0d8c897f7f5
- SSDEEP 768:lY5bPbPBRYiK2uk8X8IgAufBjUBEnGHDtPm0sDpvM1PkK9zHK:lYtXM8hGHDtPmhpvsPzzHK
- TLSH T1FDA31F89762032CFC457CB7289685CA4EA546CAB571B9243EC33769CD93D6B6CF0C0B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target libsvcs.dll
- Size 208KB
- SHA256 3fe29bf7e2c391d5405f8c6947cc42a6ec356fcf8455ce705dc23a156f5b450a
- MD5 c0796f2ee614e1711d5355ee42dcbf62
- SHA1 8c3b7bdb3c17109617db9941306f67bdfb26fcdd
- SHA512 303ccabf64c355313e9939adfcc6154e26e1bf4c248ad24e9ea031fea698dc6cb794fba2e88a518f90b5ccf2eb40beee772f5cd91f750a53966026c5dd0403d3
- SSDEEP 6144:Vd03Ef/RRG0bh06xjKxA38S7DibCdYe6yCQhy:Vd00Rd06xjKxA38S7DibCdYe6yCQhy
- TLSH T14124EE9C7660B2DFC85BC976CEA81C64EA60747B931B9203A05715EDAE0D997CF180F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.