General
- Target fb3b0dbfee58fac8.customDestinations-ms
- Size 2KB
- Sample260703-t5tf7acy9s
- SHA256 2ffad72a27f4b99ffc9cea0d575281f447a769871294599fd554d13d02152e7b
- MD5 591e1efc7834dcd13b074ccdc0ce093a
- SHA1 69aa0cb933f60f3ca664c09fe9e33250066c5517
- SHA512 76f13ba6490243edfcf7b570480222aebfb8b15e2509291e3a5db5780153ee6cba385408a169c3dfe9ddf064760da0c0f974192b5ce66ba9c98c5c2ae73ef55a
- TLSH T13851FF0253DB2F4FE060C337823A570ADB303C82EA63A74F9688215E5D75E005F5DB2A
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
fb3b0dbfee58fac8.customdestinations-ms
Resource
win10v2004-20260513-en
3 signatures
60 seconds
Behavioral task
behavioral2
Sample
fb3b0dbfee58fac8.customdestinations-ms
Resource
win11ltsc2024-20260629-en
12 signatures
60 seconds
Malware Config
Targets
-
- Target fb3b0dbfee58fac8.customDestinations-ms
- Size 2KB
- SHA256 2ffad72a27f4b99ffc9cea0d575281f447a769871294599fd554d13d02152e7b
- MD5 591e1efc7834dcd13b074ccdc0ce093a
- SHA1 69aa0cb933f60f3ca664c09fe9e33250066c5517
- SHA512 76f13ba6490243edfcf7b570480222aebfb8b15e2509291e3a5db5780153ee6cba385408a169c3dfe9ddf064760da0c0f974192b5ce66ba9c98c5c2ae73ef55a
- TLSH T13851FF0253DB2F4FE060C337823A570ADB303C82EA63A74F9688215E5D75E005F5DB2A
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.