General
- Target 2026-07-03_f2bd093cee6414c64c4ca5156dfc3fe6_mespinoza
- Size 775KB
- Sample260703-stmc3agy2l
- SHA256 04a5d2340e679548406f5a3bb8f2ce09662875fa592c0f82c1cb38c2442a4e8c
- MD5 f2bd093cee6414c64c4ca5156dfc3fe6
- SHA1 fdffbce908a2f4d584d7d4a329b14d9b4934ccdd
- SHA512 6ef2fdd4232beedf2d8b96f8351b5ffd4b5c75052be66c59e5ec207d27d6ab2e63a60dd6e812681deb92ad1d5b2cea414240d469edea7eeb0d7da69b61437cb3
- SSDEEP 6144:gGDs9+5tfsnc91Vr97MKNRneNMToeGYV3+j:gKs9msc/TcW3+j
- TLSH T161F4403375A91848FD0E2DF04581B234F321ADAF3E4F7A8ADC48760E99776D23C591A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_f2bd093cee6414c64c4ca5156dfc3fe6_mespinoza.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_f2bd093cee6414c64c4ca5156dfc3fe6_mespinoza.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_f2bd093cee6414c64c4ca5156dfc3fe6_mespinoza
- Size 775KB
- SHA256 04a5d2340e679548406f5a3bb8f2ce09662875fa592c0f82c1cb38c2442a4e8c
- MD5 f2bd093cee6414c64c4ca5156dfc3fe6
- SHA1 fdffbce908a2f4d584d7d4a329b14d9b4934ccdd
- SHA512 6ef2fdd4232beedf2d8b96f8351b5ffd4b5c75052be66c59e5ec207d27d6ab2e63a60dd6e812681deb92ad1d5b2cea414240d469edea7eeb0d7da69b61437cb3
- SSDEEP 6144:gGDs9+5tfsnc91Vr97MKNRneNMToeGYV3+j:gKs9msc/TcW3+j
- TLSH T161F4403375A91848FD0E2DF04581B234F321ADAF3E4F7A8ADC48760E99776D23C591A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.