General
- Target wparser.exe
- Size 10.6MB
- Sample260706-pz5vtabs8r
- SHA256 d1f7ac928fa6d2dfc4d614b4671729363f585d6c176bb412cb350d281ee536c9
- MD5 d46ca99c69031df6e82a9817c1ceb83d
- SHA1 407257233c200af922d685b7acc8eb78e0d602dc
- SHA512 0b50376102a0879a6190bd34e253b75e6699ea8f5a36e07aa4836ade6eec1748add713ea8ac96b3ce07eceba15d453b580d04fe4237c31ed9afbe659e09fbdba
- SSDEEP 98304:4mqKzLzr4cL5p8xTvjNVJs4CxCOnC/Q+kv5g8:49vqI/Q5v5g8
- TLSH T14CB6F85BEB7600D2D4BAC1398653A236FD71385A837467DF9B409A561F22BF0AE3D340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
wparser.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
wparser.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target wparser.exe
- Size 10.6MB
- SHA256 d1f7ac928fa6d2dfc4d614b4671729363f585d6c176bb412cb350d281ee536c9
- MD5 d46ca99c69031df6e82a9817c1ceb83d
- SHA1 407257233c200af922d685b7acc8eb78e0d602dc
- SHA512 0b50376102a0879a6190bd34e253b75e6699ea8f5a36e07aa4836ade6eec1748add713ea8ac96b3ce07eceba15d453b580d04fe4237c31ed9afbe659e09fbdba
- SSDEEP 98304:4mqKzLzr4cL5p8xTvjNVJs4CxCOnC/Q+kv5g8:49vqI/Q5v5g8
- TLSH T14CB6F85BEB7600D2D4BAC1398653A236FD71385A837467DF9B409A561F22BF0AE3D340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.