General
- Target VolatilityStorm.zip
- Size 2.2MB
- Sample260703-g46nxact5v
- SHA256 93e8a084eff2f9530b3cb1dee0cf2363e76c6e11e17b116da1b1a604ca50663a
- MD5 9f393665d48ab75faeb964936fcd3648
- SHA1 825ded52af6dfbf276960e63cb6d25153928d6df
- SHA512 cd997c2783939bf8bff818cb111c6a866ab003ab984c2afab5ddd75e5860c1cf83f5c0bc31abb08415de3eb4a43e6d6edba281b9e834df0ab456e7361810ddb9
- SSDEEP 49152:2uSasMLI1x/UC2hbdbMcBD1XVTta8DG9tgy1oPB7XSSgga:2y5U1x/QhRb7Xba8DGH5CLS7ga
- TLSH T188B533B434CD11AC7776E952BB0E3CE5D8A6B6045E8BBEAAAD43F50100A713D70D8D32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent_tmp.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
agent_tmp.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target agent_tmp.exe
- Size 3.6MB
- SHA256 6bf5e38d4ca79b6c239393e50bc7b2b0f2d626462c9791b7454971704f924ac6
- MD5 5095321397ff007422b32fd98f34d365
- SHA1 d36c22639e1df22b119afc9561eb289c6e97b859
- SHA512 174f0a7ccbd58a346fe74da566e3abf285cd92724d82e59f2ff3842bf6b00a1a6b8731bc48fa6f594116bc65c4e203d95427fc4c72b528e7f633b523cd2401ee
- SSDEEP 98304:CM3sJ6ib0V0XhNTmwTIrKk8m8bILHGWCv5IjjPmgd7:MJ3NTmwWWegv5IjjPmgd7
- TLSH T118069D17E2A350FCC12BC17C86579672A531B828C534FE7F9A80DB311E71E50AB6EB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1