General
- Target 956f46dc0d8e2f42578c2dd419fc4b648cf395c973b86f772a7894f6d2ded5ae
- Size 31KB
- Sample260706-3mls3adt6t
- SHA256 956f46dc0d8e2f42578c2dd419fc4b648cf395c973b86f772a7894f6d2ded5ae
- MD5 72e366e0e7396606f27acaeeb871670c
- SHA1 3393dd63045b31490a058832b09d34b3eb317b91
- SHA512 4f146f5c8661da69cc72831b64438bed8f893821980e39a0a2c6af3c63f289d885df0eddfcf7e0fe719d41d205381c0fb5909ca1e37824965e4e9e9ca474c5a0
- SSDEEP 384:wi9pCs1XxRaDkt3jgq7gy/R7777x6KMH0s69DMLelTKWLjWvh7++l4wijUeoNuN:h5RSY3jgqbC3HulmcMh7BIdN
- TLSH T100E2076BFB63986CC1D693B471DBD9B6B070FCA518A0992C43A143343B976488F78787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
956f46dc0d8e2f42578c2dd419fc4b648cf395c973b86f772a7894f6d2ded5ae.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
956f46dc0d8e2f42578c2dd419fc4b648cf395c973b86f772a7894f6d2ded5ae.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 956f46dc0d8e2f42578c2dd419fc4b648cf395c973b86f772a7894f6d2ded5ae
- Size 31KB
- SHA256 956f46dc0d8e2f42578c2dd419fc4b648cf395c973b86f772a7894f6d2ded5ae
- MD5 72e366e0e7396606f27acaeeb871670c
- SHA1 3393dd63045b31490a058832b09d34b3eb317b91
- SHA512 4f146f5c8661da69cc72831b64438bed8f893821980e39a0a2c6af3c63f289d885df0eddfcf7e0fe719d41d205381c0fb5909ca1e37824965e4e9e9ca474c5a0
- SSDEEP 384:wi9pCs1XxRaDkt3jgq7gy/R7777x6KMH0s69DMLelTKWLjWvh7++l4wijUeoNuN:h5RSY3jgqbC3HulmcMh7BIdN
- TLSH T100E2076BFB63986CC1D693B471DBD9B6B070FCA518A0992C43A143343B976488F78787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.