General
- Target 2026-07-03_b40094c50647a624d3ca79be45958f39_mespinoza
- Size 970KB
- Sample260703-ysymlaby8n
- SHA256 8f0d5c0db2a989a0125704a713a8d777768900492a9084d8556c05e7f3243eb1
- MD5 b40094c50647a624d3ca79be45958f39
- SHA1 58aaf2579dbe201352864ea5c333d378d30f94e9
- SHA512 15bd4ceaa01e146506baeaa87cf4976d475a36b74205efb92eafe353591a70ed56123acfa7b9ebae74019dda6102d13ea86a36d530e091d502d246b83fbcefc7
- SSDEEP 12288:hZWNlbkuwtIYkfXacSs9lDviajPkw/Z/SRZd7pe5gWAnfQxY:LPu0bkf/OjS/wZd7wcd
- TLSH T13F2518C6B69084F1E4A584348911966DD7B2BC45CA139F8B21906EEFFFF36D24F29231
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_b40094c50647a624d3ca79be45958f39_mespinoza.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_b40094c50647a624d3ca79be45958f39_mespinoza.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_b40094c50647a624d3ca79be45958f39_mespinoza
- Size 970KB
- SHA256 8f0d5c0db2a989a0125704a713a8d777768900492a9084d8556c05e7f3243eb1
- MD5 b40094c50647a624d3ca79be45958f39
- SHA1 58aaf2579dbe201352864ea5c333d378d30f94e9
- SHA512 15bd4ceaa01e146506baeaa87cf4976d475a36b74205efb92eafe353591a70ed56123acfa7b9ebae74019dda6102d13ea86a36d530e091d502d246b83fbcefc7
- SSDEEP 12288:hZWNlbkuwtIYkfXacSs9lDviajPkw/Z/SRZd7pe5gWAnfQxY:LPu0bkf/OjS/wZd7wcd
- TLSH T13F2518C6B69084F1E4A584348911966DD7B2BC45CA139F8B21906EEFFFF36D24F29231
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.