General
- Target nice_dll_you_got_there.dll
- Size 475KB
- Sample260706-pfdl8aez41
- SHA256 6110f6f8195d68919a58adea1a52b1983edc07e4c4039573a3b1ba6a5c799ff0
- MD5 baa2bac7a4f6f53105c0442854d36d59
- SHA1 5d11a451a30794710cf5ec5f954e88cf629804d4
- SHA512 f73b61f86530d688925ff69f6f7ed2dff40a3599e793140929fa7e3e52afca039b65cb4da5c28e78e8f192f8574dcba784ba73c74d801077f810f3944c517b9b
- SSDEEP 6144:PwjMAnJxfYrX7UlALLGSYHM57+vgGwKr5t72wMbAfrHjm0YhttffA:PwjMAnzfYDQCaS7+vkKFta6bjRYDRI
- TLSH T110A49E16B6B500F9D177D07CCAA34A02EA727C560760DBCF03909A7A2F677E09A7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
nice_dll_you_got_there.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
nice_dll_you_got_there.dll
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target nice_dll_you_got_there.dll
- Size 475KB
- SHA256 6110f6f8195d68919a58adea1a52b1983edc07e4c4039573a3b1ba6a5c799ff0
- MD5 baa2bac7a4f6f53105c0442854d36d59
- SHA1 5d11a451a30794710cf5ec5f954e88cf629804d4
- SHA512 f73b61f86530d688925ff69f6f7ed2dff40a3599e793140929fa7e3e52afca039b65cb4da5c28e78e8f192f8574dcba784ba73c74d801077f810f3944c517b9b
- SSDEEP 6144:PwjMAnJxfYrX7UlALLGSYHM57+vgGwKr5t72wMbAfrHjm0YhttffA:PwjMAnzfYDQCaS7+vkKFta6bjRYDRI
- TLSH T110A49E16B6B500F9D177D07CCAA34A02EA727C560760DBCF03909A7A2F677E09A7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.