General
- Target bhlg.msi
- Size 8.2MB
- Sample260705-akj78sa12q
- SHA256 77643b0fc769a3699e371e038f11656d0e839eb5dbcfb200acce426965606fb4
- MD5 5fd12983c3f961b7a0b3b7118816157b
- SHA1 417b654ef1e15585b2392f9530ff0777e37a05df
- SHA512 d2ef58857fcbca65ab7740dfb1ed28c073ece553a6dca35561cdc10cee8b542ac9d7e3cd26c3866b4514db701b6dba819491f439f8d6721a6c9a214aa6c09bef
- SSDEEP 196608:EW+WiNKQW/VGfv3Ebh1Sv8/7iej+7xM1bJDVCTx4:s1/oSOh4xMLUTx4
- TLSH T1D3963329B7D409AAE8778275C8674121EF717C493720DA9F47A4B11C9F3B7A0B5BB302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bhlg.msi
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
bhlg.msi
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target bhlg.msi
- Size 8.2MB
- SHA256 77643b0fc769a3699e371e038f11656d0e839eb5dbcfb200acce426965606fb4
- MD5 5fd12983c3f961b7a0b3b7118816157b
- SHA1 417b654ef1e15585b2392f9530ff0777e37a05df
- SHA512 d2ef58857fcbca65ab7740dfb1ed28c073ece553a6dca35561cdc10cee8b542ac9d7e3cd26c3866b4514db701b6dba819491f439f8d6721a6c9a214aa6c09bef
- SSDEEP 196608:EW+WiNKQW/VGfv3Ebh1Sv8/7iej+7xM1bJDVCTx4:s1/oSOh4xMLUTx4
- TLSH T1D3963329B7D409AAE8778275C8674121EF717C493720DA9F47A4B11C9F3B7A0B5BB302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Loads dropped DLL
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.