General
- Target 456a542ba459e0ab9089e495cdc71c5e5995fd19dc5cfebea848fd45b881d804
- Size 809KB
- Sample260706-fs459sh12w
- SHA256 456a542ba459e0ab9089e495cdc71c5e5995fd19dc5cfebea848fd45b881d804
- MD5 72a7c94c2b3b7c758291fa01a8ace04e
- SHA1 a3472e8b5610c6af91722e12659b6a8b34c85547
- SHA512 cf4699618a8b9d3f53d937f8e396895e63f3f9764e6ef6b960fd867d8d417d8fbb9f059326e7d4c488fb9b14a3959f186ddb153b9455879734e24c94747b4517
- SSDEEP 24576:5bd4TOzG5JTI78lEDEo7ETF/IHizQ5WFPo:5bdoKSJEaEYylsQ5WFw
- TLSH T1450533D629F788D00383CE746BD3EED8CAF95C07425264F765DBBA823294C64952EDE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
文件粉碎机 killer_v0.6.好好好.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
文件粉碎机 killer_v0.6.好好好.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 文件粉碎机 killer_v0.6.好好好.exe
- Size 1.3MB
- SHA256 d2ca7104fad3fd16436c255e79f189267e94c8b181778205fc06a903f4be3fd3
- MD5 d7ecaa07ea429f17eae8d0965c8cba9f
- SHA1 e33407057918c6a8a41615a30a6231b6e7a0ccca
- SHA512 71eda78ac3a02b72e56c25f66c6bf3667ad46585dc205d4ae2d639a0f66448f020932a6ca87d33b0a830aaf2511d8266d34584b0e1beec6e523d56556bbeac52
- SSDEEP 24576:B4nXubIQGyxbPV0db26eNS856rEpriTtTqJ/6PWjW3Pm:Bqe3f646gdJ/GWjW3e
- TLSH T11E55AE3FB268A53EC5AA0B3245B3D360997BBA65B81A8C1F07F0090DDF664701E3F655
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.