General
- Target 372c2270861b5de328f98b9a2e24b82c4276b05d9e2bc08c30374f7de879879e.exe
- Size 468KB
- Sample260706-m4c99ad121
- SHA256 372c2270861b5de328f98b9a2e24b82c4276b05d9e2bc08c30374f7de879879e
- MD5 1d0902a4e57d99143db4d20def7e2fdb
- SHA1 89532ee901054f2172d59cef1781f2558d41c01f
- SHA512 21c1f24891f18bf8b46b2b06c2278191ea92c92250f56c7f032a44a273b9bce175078765275c5e3480a49887a9459067dbe94cd534f4789b7660764f884eff46
- SSDEEP 6144:q1p3HAzqPUPejsNVRbIf7m6A5fBLT9XTj8Tu6eezwJ:q1p3H6CUPiKVRcf7lUzXcTus
- TLSH T15DA4F60167F58138F7F32F34AEB582A60977BEA9AC79D10D1348852D0E35AA4CA74737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
372c2270861b5de328f98b9a2e24b82c4276b05d9e2bc08c30374f7de879879e.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
372c2270861b5de328f98b9a2e24b82c4276b05d9e2bc08c30374f7de879879e.exe
Resource
win11ltsc2024-20260629-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 372c2270861b5de328f98b9a2e24b82c4276b05d9e2bc08c30374f7de879879e.exe
- Size 468KB
- SHA256 372c2270861b5de328f98b9a2e24b82c4276b05d9e2bc08c30374f7de879879e
- MD5 1d0902a4e57d99143db4d20def7e2fdb
- SHA1 89532ee901054f2172d59cef1781f2558d41c01f
- SHA512 21c1f24891f18bf8b46b2b06c2278191ea92c92250f56c7f032a44a273b9bce175078765275c5e3480a49887a9459067dbe94cd534f4789b7660764f884eff46
- SSDEEP 6144:q1p3HAzqPUPejsNVRbIf7m6A5fBLT9XTj8Tu6eezwJ:q1p3H6CUPiKVRcf7lUzXcTus
- TLSH T15DA4F60167F58138F7F32F34AEB582A60977BEA9AC79D10D1348852D0E35AA4CA74737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory