General
- Target TestApp.exe
- Size 48KB
- Sample260705-tbdhwadv3z
- SHA256 cf6ff6f8d68180d1b7cf35c40dbd6283bd4e6a749efef201db67b4a0cee664de
- MD5 3b2ef04dc65e9f7094bedbb5fbd8ef2d
- SHA1 00ac3fcaec69a5e523463842099489a83b00655b
- SHA512 628f6f71c622ff17d788989161c7a89ab251fb28cff769ad12487c2c9fc74a52aad63b5d60599e660e57cc95979c6b99a46233c3b3c26206a99d505719165691
- SSDEEP 768:/8nDjfP3Y5kCSFaN8qtFpG79kb52c0XIUF740H7:/8nDjXs1N8qTpWCr0XH04
- TLSH T18523F92ADE16513FD35A8DB8DA434901DE63BCC64BD1B6CFA7401CD60D29AD85F3EA02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TestApp.exe
Resource
win11ltsc2024-20260629-en
18 signatures
900 seconds
Malware Config
Targets
-
- Target TestApp.exe
- Size 48KB
- SHA256 cf6ff6f8d68180d1b7cf35c40dbd6283bd4e6a749efef201db67b4a0cee664de
- MD5 3b2ef04dc65e9f7094bedbb5fbd8ef2d
- SHA1 00ac3fcaec69a5e523463842099489a83b00655b
- SHA512 628f6f71c622ff17d788989161c7a89ab251fb28cff769ad12487c2c9fc74a52aad63b5d60599e660e57cc95979c6b99a46233c3b3c26206a99d505719165691
- SSDEEP 768:/8nDjfP3Y5kCSFaN8qtFpG79kb52c0XIUF740H7:/8nDjXs1N8qTpWCr0XH04
- TLSH T18523F92ADE16513FD35A8DB8DA434901DE63BCC64BD1B6CFA7401CD60D29AD85F3EA02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.