General
- Target 9ddaa043416433037190e7667011e29466d4a04b0f4e20e3e9e547459838bfcb
- Size 10.1MB
- Sample260702-pz3epaav6v
- SHA256 9ddaa043416433037190e7667011e29466d4a04b0f4e20e3e9e547459838bfcb
- MD5 80cb918a8ffbede2c5f34871a06d8859
- SHA1 306a236563508d354237e2e32fe624a6de994a78
- SHA512 bf001736666e41335020877ef6c16957f696e622018903cfb24584905904cfe7dd9a5b8d37a1103232812c2f0a62794a3db335b14fb1838aaf5ddd6dfbf7da37
- SSDEEP 196608:wCBUGi50W8UAQXgInGCxdGjP5Ui2bjKVPy2wEP4Jkz9Rwpr2Zwl61BmFEQOwuCFu:wCBU7aW8yRnGCnGjKi2bjRoPLwq72Ebz
- TLSH T117B633D8BBC105E0E89B9239D8D2556BE3A4B53207A4CACB5BF24D600DB31E9FD34761
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
9ddaa043416433037190e7667011e29466d4a04b0f4e20e3e9e547459838bfcb.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
9ddaa043416433037190e7667011e29466d4a04b0f4e20e3e9e547459838bfcb.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 9ddaa043416433037190e7667011e29466d4a04b0f4e20e3e9e547459838bfcb
- Size 10.1MB
- SHA256 9ddaa043416433037190e7667011e29466d4a04b0f4e20e3e9e547459838bfcb
- MD5 80cb918a8ffbede2c5f34871a06d8859
- SHA1 306a236563508d354237e2e32fe624a6de994a78
- SHA512 bf001736666e41335020877ef6c16957f696e622018903cfb24584905904cfe7dd9a5b8d37a1103232812c2f0a62794a3db335b14fb1838aaf5ddd6dfbf7da37
- SSDEEP 196608:wCBUGi50W8UAQXgInGCxdGjP5Ui2bjKVPy2wEP4Jkz9Rwpr2Zwl61BmFEQOwuCFu:wCBU7aW8yRnGCnGjKi2bjRoPLwq72Ebz
- TLSH T117B633D8BBC105E0E89B9239D8D2556BE3A4B53207A4CACB5BF24D600DB31E9FD34761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Loads dropped DLL
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.