General
- Target 01728b7a1da6babdda1d746185350e1786adf4a45434463ff434d724570ba71f
- Size 349KB
- Sample260703-qt7b5aez2q
- SHA256 01728b7a1da6babdda1d746185350e1786adf4a45434463ff434d724570ba71f
- MD5 f68a35d4ab563871e758e4f4608426dc
- SHA1 31bed2fd4bc47ac2cb79101bd574ed1209bc71ac
- SHA512 9caf8efc8cde45276dbc04ecb4dc8ba81b91af674924132f99060facdb2b276c86bca336baa0525a4bf061983ee59d96f9a5cefcf9e1a9a81d57eec2cd470213
- SSDEEP 3072:XVSFsVDEF2AFjzsJ7s+r0xFrEDWHU7WzfTlYIk7PV+/nyz3HZs6N6Yhvmet6RUs9:XVvVm26E/ENEDF7aL9CcYwEmCvCpRBJ
- TLSH T1DD7417D0669000ACF267C276D833BD06BE393E166F62C75ABB9173604E734A15D6A337
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
01728b7a1da6babdda1d746185350e1786adf4a45434463ff434d724570ba71f.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
01728b7a1da6babdda1d746185350e1786adf4a45434463ff434d724570ba71f.exe
Resource
win11ltsc2024-20260629-en
23 signatures
150 seconds
Malware Config
Targets
-
- Target 01728b7a1da6babdda1d746185350e1786adf4a45434463ff434d724570ba71f
- Size 349KB
- SHA256 01728b7a1da6babdda1d746185350e1786adf4a45434463ff434d724570ba71f
- MD5 f68a35d4ab563871e758e4f4608426dc
- SHA1 31bed2fd4bc47ac2cb79101bd574ed1209bc71ac
- SHA512 9caf8efc8cde45276dbc04ecb4dc8ba81b91af674924132f99060facdb2b276c86bca336baa0525a4bf061983ee59d96f9a5cefcf9e1a9a81d57eec2cd470213
- SSDEEP 3072:XVSFsVDEF2AFjzsJ7s+r0xFrEDWHU7WzfTlYIk7PV+/nyz3HZs6N6Yhvmet6RUs9:XVvVm26E/ENEDF7aL9CcYwEmCvCpRBJ
- TLSH T1DD7417D0669000ACF267C276D833BD06BE393E166F62C75ABB9173604E734A15D6A337
- MD5 SHA1 SHA512 SSDEEP TLSH
Downloads MZ/PE file
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Defense Evasion
Access Token Manipulation
1Create Process with Token
1Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1