General
- Target hidutil.plist
- Size 686KB
- Sample260706-gnlc2aes7q
- SHA256 f6642e9e911ac27973c63d264d2ba8c65cdf3b14c1af5cdf60fda6e1d0df9d87
- MD5 35c316979c883c7d4884de48e209fffc
- SHA1 ee921478ada887b52490a59829dab44c325aa1b7
- SHA512 c7215bd51034d7885fde2ae1bff614226f63677a8492357a3e8a1f93fd24d8348e6a654e07af9be550e67aa79e1838ef2334364bac56a4920a3332903a9047b5
- SSDEEP 3072:rW8GmDNmkIeFtWR5wNmkPeO7W8imtNmkIeFeANmDPeFZW8CFrNmkIeF7z+NmDIeR:r0Bv
- TLSH T15BE46EF08E4C2DE508891A615660D90E40EF3DF54CF500F7B973CEB6B8D1E4662E9A9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
hidutil.xml
Resource
win10v2004-20260513-en
5 signatures
120 seconds
Behavioral task
behavioral2
Sample
hidutil.xml
Resource
win11ltsc2024-20260629-en
12 signatures
120 seconds
Malware Config
Targets
-
- Target hidutil.plist
- Size 686KB
- SHA256 f6642e9e911ac27973c63d264d2ba8c65cdf3b14c1af5cdf60fda6e1d0df9d87
- MD5 35c316979c883c7d4884de48e209fffc
- SHA1 ee921478ada887b52490a59829dab44c325aa1b7
- SHA512 c7215bd51034d7885fde2ae1bff614226f63677a8492357a3e8a1f93fd24d8348e6a654e07af9be550e67aa79e1838ef2334364bac56a4920a3332903a9047b5
- SSDEEP 3072:rW8GmDNmkIeFtWR5wNmkPeO7W8imtNmkIeFeANmDPeFZW8CFrNmkIeF7z+NmDIeR:r0Bv
- TLSH T15BE46EF08E4C2DE508891A615660D90E40EF3DF54CF500F7B973CEB6B8D1E4662E9A9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.