General
- Target Yjzlxkdoi_Slayed.exe
- Size 242KB
- Sample260702-s8l1vaes3r
- SHA256 57d26f045da134f570eb745cee88057c0c3872d6aeab9477fc17ae46853e93c2
- MD5 fbfe4c2ffe4f4eba18c3c784bcd27528
- SHA1 3efb2084f2eb98eff1ae58e497c27527d89192f9
- SHA512 3b0975a58d9ec881b3819d5cf8a5c88dac1b2c88ec76a417d07a614ac60489397137f4f4332bf2866f6ba756b99a4a787596c433cc010f02f31966ae9955d686
- SSDEEP 3072:MCgpH9cd7O5ohSk60DOqRTjV6kjm4l2HLcGTlCyrq1e4QTlDgAhyZ6skoYmabM9K:MlF55lcjVQvTlKXyDe6sBCM9gQu
- TLSH T1F2347E0B776CCB32D57D5AB4B2CF070613F5B28A9E23E70AEE4916F41A873522D5214B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Yjzlxkdoi_Slayed.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Yjzlxkdoi_Slayed.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Yjzlxkdoi_Slayed.exe
- Size 242KB
- SHA256 57d26f045da134f570eb745cee88057c0c3872d6aeab9477fc17ae46853e93c2
- MD5 fbfe4c2ffe4f4eba18c3c784bcd27528
- SHA1 3efb2084f2eb98eff1ae58e497c27527d89192f9
- SHA512 3b0975a58d9ec881b3819d5cf8a5c88dac1b2c88ec76a417d07a614ac60489397137f4f4332bf2866f6ba756b99a4a787596c433cc010f02f31966ae9955d686
- SSDEEP 3072:MCgpH9cd7O5ohSk60DOqRTjV6kjm4l2HLcGTlCyrq1e4QTlDgAhyZ6skoYmabM9K:MlF55lcjVQvTlKXyDe6sBCM9gQu
- TLSH T1F2347E0B776CCB32D57D5AB4B2CF070613F5B28A9E23E70AEE4916F41A873522D5214B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1