General
- Target imagiro_piano2_v2.0_win_imagiropiano.exe
- Size 24.8MB
- Sample260704-2zed3sey9s
- SHA256 b23873d1e53208ed049438415141c8a55fa205514c445e240abdd3aa3c3f55e7
- MD5 08e5720192dc7e6738f678c9fa73ba91
- SHA1 27b6e1bbdc3ee06e83716319b396ef5b9beb51a5
- SHA512 60a0c3871ba15fee3f9e83f41b5addb64bb5ecf15a3ed6ff4e672bee84e954f0b49eff41ac5875f32a18f5b56a1aecc185a4a042dfec9464419d698f1e431c99
- SSDEEP 786432:bMhidy8TGKAmXu0rmgumYoydQS6TSBzFZPFzVrDH9:bHtTGfGBlumgOS6WBzFZPBVfH9
- TLSH T1964733377254633DC8AE1A32157286784D7B6E64B5268C3E07F8481DEF366302E2776E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
imagiro_piano2_v2.0_win_imagiropiano.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
imagiro_piano2_v2.0_win_imagiropiano.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target imagiro_piano2_v2.0_win_imagiropiano.exe
- Size 24.8MB
- SHA256 b23873d1e53208ed049438415141c8a55fa205514c445e240abdd3aa3c3f55e7
- MD5 08e5720192dc7e6738f678c9fa73ba91
- SHA1 27b6e1bbdc3ee06e83716319b396ef5b9beb51a5
- SHA512 60a0c3871ba15fee3f9e83f41b5addb64bb5ecf15a3ed6ff4e672bee84e954f0b49eff41ac5875f32a18f5b56a1aecc185a4a042dfec9464419d698f1e431c99
- SSDEEP 786432:bMhidy8TGKAmXu0rmgumYoydQS6TSBzFZPFzVrDH9:bHtTGfGBlumgOS6WBzFZPBVfH9
- TLSH T1964733377254633DC8AE1A32157286784D7B6E64B5268C3E07F8481DEF366302E2776E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.