General
- Target 3a9685d42c3347fa486d0b7f40c9afc69e28bede1bd15753ea3bf9cd17dfa5e2
- Size 901KB
- Sample260706-pynvxaft6s
- SHA256 3a9685d42c3347fa486d0b7f40c9afc69e28bede1bd15753ea3bf9cd17dfa5e2
- MD5 cbe83f0177ed8b8511ac133fdcd6f3be
- SHA1 541e3b312dd2fe7703f8874d9dc796c713039a1a
- SHA512 d9b52ad86896ed4aeb97cbafd3abba130a49c4c746430d38ebe8b1ff480704ca998cf53214b362555c260b344887e2081e3a20b04437e5aa840e53cfb563a510
- SSDEEP 24576:8tHVizO7Mj8c9kvCHok+lBgykDZT6ZN0P2isq7kasEl6rOLybj:wHVit8c9k5lBg3DZuiP2isq7kasEl66O
- TLSH T16F155C19E7F502B8E5FBD5B5CE775417EBB3B84A4630C68E02A198492F33B50892E713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3a9685d42c3347fa486d0b7f40c9afc69e28bede1bd15753ea3bf9cd17dfa5e2.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
3a9685d42c3347fa486d0b7f40c9afc69e28bede1bd15753ea3bf9cd17dfa5e2.dll
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 3a9685d42c3347fa486d0b7f40c9afc69e28bede1bd15753ea3bf9cd17dfa5e2
- Size 901KB
- SHA256 3a9685d42c3347fa486d0b7f40c9afc69e28bede1bd15753ea3bf9cd17dfa5e2
- MD5 cbe83f0177ed8b8511ac133fdcd6f3be
- SHA1 541e3b312dd2fe7703f8874d9dc796c713039a1a
- SHA512 d9b52ad86896ed4aeb97cbafd3abba130a49c4c746430d38ebe8b1ff480704ca998cf53214b362555c260b344887e2081e3a20b04437e5aa840e53cfb563a510
- SSDEEP 24576:8tHVizO7Mj8c9kvCHok+lBgykDZT6ZN0P2isq7kasEl6rOLybj:wHVit8c9k5lBg3DZuiP2isq7kasEl66O
- TLSH T16F155C19E7F502B8E5FBD5B5CE775417EBB3B84A4630C68E02A198492F33B50892E713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.