General
- Target wparser.exe
- Size 10.6MB
- Sample260706-p64akafv9v
- SHA256 98cc22b1124954833b1cb88caf9a82fe201a6a4da19d353081e6307f3d88d22c
- MD5 b711d7f9e4d4f40599a84adc055f4c11
- SHA1 839e1d3d35cabcce4e8fa286b652e69ef3d609d5
- SHA512 c92d0db9e1977cbb5d9cf5d9629b3c13c8cb048b287d76bf635f1d53828f71575c00ba2194383e4d0ef9056a6e2c9191926635671a3b8494c4529c734ebbe23e
- SSDEEP 98304:MmqKzLzr4cL5p8xTvjNVGs4CxpknC/Q+kv5g8:M9KqV/Q5v5g8
- TLSH T10FB6F85BEB7600D2D4BAC1398653A236FD71385A837467DF9B409A561F22BF0AE3D340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
wparser.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
wparser.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target wparser.exe
- Size 10.6MB
- SHA256 98cc22b1124954833b1cb88caf9a82fe201a6a4da19d353081e6307f3d88d22c
- MD5 b711d7f9e4d4f40599a84adc055f4c11
- SHA1 839e1d3d35cabcce4e8fa286b652e69ef3d609d5
- SHA512 c92d0db9e1977cbb5d9cf5d9629b3c13c8cb048b287d76bf635f1d53828f71575c00ba2194383e4d0ef9056a6e2c9191926635671a3b8494c4529c734ebbe23e
- SSDEEP 98304:MmqKzLzr4cL5p8xTvjNVGs4CxpknC/Q+kv5g8:M9KqV/Q5v5g8
- TLSH T10FB6F85BEB7600D2D4BAC1398653A236FD71385A837467DF9B409A561F22BF0AE3D340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.