General
- Target lethalcompany.py
- Size 10KB
- Sample260703-2ddknacz8p
- SHA256 6421e303efb39fa3f66fe19aead86a2cab0881105267555a9c5fda697a902760
- MD5 73f6fa3820170b74fbda9ff54c28b591
- SHA1 0cf6999e1d50a7d196a9dded513736485e329235
- SHA512 50037fcf3a997b4d26735ff53ca045f30d4bbf8a298f8974ffeefe7585782e3569a4f347cbc2d4bac9e373087767f0982178db28bb82c6e6e9c39ec8b39da33d
- SSDEEP 96:ZgSjhHdmSBvGDWFqcxKrxO8YtfDSSGlMV32dHAQ/gU/INT3PE9hGt1vxutL:ZljeSBDqc1DSksdo+SvxutL
- TLSH T14C2251B21C150855F383D65D0AA3E4C2132A7D677A0A59387AFCB6808FCCA7691D5EFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
lethalcompany.py
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
lethalcompany.py
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target lethalcompany.py
- Size 10KB
- SHA256 6421e303efb39fa3f66fe19aead86a2cab0881105267555a9c5fda697a902760
- MD5 73f6fa3820170b74fbda9ff54c28b591
- SHA1 0cf6999e1d50a7d196a9dded513736485e329235
- SHA512 50037fcf3a997b4d26735ff53ca045f30d4bbf8a298f8974ffeefe7585782e3569a4f347cbc2d4bac9e373087767f0982178db28bb82c6e6e9c39ec8b39da33d
- SSDEEP 96:ZgSjhHdmSBvGDWFqcxKrxO8YtfDSSGlMV32dHAQ/gU/INT3PE9hGt1vxutL:ZljeSBDqc1DSksdo+SvxutL
- TLSH T14C2251B21C150855F383D65D0AA3E4C2132A7D677A0A59387AFCB6808FCCA7691D5EFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.