General
- Target missisipi.txt
- Size 17B
- Sample260703-khwtcsdy7y
- SHA256 cd6feeb008db3efa4fc8cd93df6dd7f207de1af3a6f845fc2e85f1754f642055
- MD5 fcbe8b23a106753f84c87c653ebfae4d
- SHA1 cbaa7399a530d5cb9ceb9c7c92778bbba7214b5e
- SHA512 80441bcc9143bed5924e5d8bd07774aa17cc740cef1fa0313cb2100fcd54deb30faef300718880f803d6366250cd757e4336071796bc943c901672f96e091ee0
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
missisipi.txt
Resource
win11ltsc2024-20260629-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target missisipi.txt
- Size 17B
- SHA256 cd6feeb008db3efa4fc8cd93df6dd7f207de1af3a6f845fc2e85f1754f642055
- MD5 fcbe8b23a106753f84c87c653ebfae4d
- SHA1 cbaa7399a530d5cb9ceb9c7c92778bbba7214b5e
- SHA512 80441bcc9143bed5924e5d8bd07774aa17cc740cef1fa0313cb2100fcd54deb30faef300718880f803d6366250cd757e4336071796bc943c901672f96e091ee0
- MD5 SHA1 SHA512
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.