General
- Target dumper.exe
- Size 2.9MB
- Sample260704-fxcltaft8j
- SHA256 59cde8e668890b04e16ec6325acdf3937b9b54a1f25a7e329984c8f2540fef58
- MD5 a581c611c1194aeac7687ccce4d1e1c5
- SHA1 96493b2b402796a7d18fb4062cfc6aaf5f48a495
- SHA512 94afeffed35c6a5b162fcb7c08462114ea85d39afa4d8143abc454aee0fadadeac5a3c8454a40c9a89f634c26a97a0d2662c1f1231e74f39e325d75f16c46a01
- SSDEEP 49152:tWmc4fgaLAZni5GOmvpdcHdqHQfR8Ces5JemOmTV:C4fUHQfR2s5JemOmTV
- TLSH T166E5E74369DB0DE5CED267B8A5C71339A774FD718E291F2BAA08D2312D536C4AD1EB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dumper.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
dumper.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target dumper.exe
- Size 2.9MB
- SHA256 59cde8e668890b04e16ec6325acdf3937b9b54a1f25a7e329984c8f2540fef58
- MD5 a581c611c1194aeac7687ccce4d1e1c5
- SHA1 96493b2b402796a7d18fb4062cfc6aaf5f48a495
- SHA512 94afeffed35c6a5b162fcb7c08462114ea85d39afa4d8143abc454aee0fadadeac5a3c8454a40c9a89f634c26a97a0d2662c1f1231e74f39e325d75f16c46a01
- SSDEEP 49152:tWmc4fgaLAZni5GOmvpdcHdqHQfR8Ces5JemOmTV:C4fUHQfR2s5JemOmTV
- TLSH T166E5E74369DB0DE5CED267B8A5C71339A774FD718E291F2BAA08D2312D536C4AD1EB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.