General
- Target Dapodik-Jatim-Sekolah-v3.exe
- Size 58.5MB
- Sample260704-wbfpcaex6j
- SHA256 0d15ed3dc4a9484bf009b27537fafbc82cd393a6e9431cf014d7d16a2c99f246
- MD5 cdb0f526fd054970085a32a41530c106
- SHA1 305c94f92b890ab6232e8a5783ca4e2f1c0546b0
- SHA512 655d7f753541fa2ace323f393f19a02f256972cc007f5b663988fd3e9578d23edca675f87322c56429199fe105135e68d9fd9dcf0a833b7bdad836b92dd5a660
- SSDEEP 1572864:wTIAKdi1tJ4r0OTh/7b+wH/MjrUyaD9U8wqt:wQIJ43Fzb0xY9Ut
- TLSH T18BD733947B52099AF5C2A0396CF5CF61B7E130C597B1886F1FB005E528EB2C5ACFA325
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Dapodik-Jatim-Sekolah-v3.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Dapodik-Jatim-Sekolah-v3.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Behavioral task
behavioral3
Sample
dapo22-silent.pyc
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
dapo22-silent.pyc
Resource
win11ltsc2024-20260630-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Dapodik-Jatim-Sekolah-v3.exe
- Size 58.5MB
- SHA256 0d15ed3dc4a9484bf009b27537fafbc82cd393a6e9431cf014d7d16a2c99f246
- MD5 cdb0f526fd054970085a32a41530c106
- SHA1 305c94f92b890ab6232e8a5783ca4e2f1c0546b0
- SHA512 655d7f753541fa2ace323f393f19a02f256972cc007f5b663988fd3e9578d23edca675f87322c56429199fe105135e68d9fd9dcf0a833b7bdad836b92dd5a660
- SSDEEP 1572864:wTIAKdi1tJ4r0OTh/7b+wH/MjrUyaD9U8wqt:wQIJ43Fzb0xY9Ut
- TLSH T18BD733947B52099AF5C2A0396CF5CF61B7E130C597B1886F1FB005E528EB2C5ACFA325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target dapo22-silent.pyc
- Size 51KB
- SHA256 942c92dd2a3e905d4e086be3bc999dc26633a542b6f2e5ddc44956b315861db3
- MD5 20d97a349e8548e09a6c2ad8c4e3d4bc
- SHA1 666c30b5ff2115bbe6d96ec454571ec983e5dd49
- SHA512 a0c2056ff57cbbb13fc99f969cd85ccb01234fa5ab51a4629c7f77dfa86c8d4e4ee7673ead1822dd2525d43705a147098e88a5d840587bccdc1637c3423eece7
- SSDEEP 1536:GV6O4YHsFpBg5KImYDlgzCr8+kHZUIokjRzRLsg:GV6O4usrB1I1pg+VdKRNLf
- TLSH T10633029CD0A188C858CF94702A34C47CC2D948F874A1FDCAD9A56E63A811356ED7FEB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10