General
- Target wparser.exe
- Size 10.6MB
- Sample260706-p99lrabv5j
- SHA256 3a32c03b231691ec8dbd193505116515c7a38c4ffdb9e5f3b7a6e87a5a54fca8
- MD5 0e50b1b7920f84eb3eb39a3cc2f51ee2
- SHA1 797e546a7c31c46cb420ffb0fdc3ea8994607cc7
- SHA512 c4ea786c9175ce7042f7d2a5bde9d153412cc92b5e0697815fca34a3388bb20e47210b1a1e8b57346bf52064eece9e961c496dce87c02935eaa11e7c8f250883
- SSDEEP 98304:MmqKzLzr4cL5p8xTvjNVGs4CxCNnC/Q+kv5g8:M9KqN/Q5v5g8
- TLSH T137B6F85BEB7600D2D4BAC1398653A236FD71385A837467DF9B409A561F22BF0AE3D340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
wparser.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
wparser.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target wparser.exe
- Size 10.6MB
- SHA256 3a32c03b231691ec8dbd193505116515c7a38c4ffdb9e5f3b7a6e87a5a54fca8
- MD5 0e50b1b7920f84eb3eb39a3cc2f51ee2
- SHA1 797e546a7c31c46cb420ffb0fdc3ea8994607cc7
- SHA512 c4ea786c9175ce7042f7d2a5bde9d153412cc92b5e0697815fca34a3388bb20e47210b1a1e8b57346bf52064eece9e961c496dce87c02935eaa11e7c8f250883
- SSDEEP 98304:MmqKzLzr4cL5p8xTvjNVGs4CxCNnC/Q+kv5g8:M9KqN/Q5v5g8
- TLSH T137B6F85BEB7600D2D4BAC1398653A236FD71385A837467DF9B409A561F22BF0AE3D340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.