General
- Target Devastate_v2.1.rar
- Size 17.1MB
- Sample260706-sbe62acv6l
- SHA256 7a95968c18514d0e3cb651f01c56e79b0da8043042b38580fe4e2c85afe3f90b
- MD5 f75426f64d15337a71e3dc9b1a43794d
- SHA1 aa1800e0f6fa2d0b35c54894eb50af84d8a179d9
- SHA512 fe63ecb38013d90209494a55a2827e17a20eab29d36865908eecccdf20d07334138ef37a39eccfa309fdf6a1ad8bcb6581530b40c8a9dbecacdda752e45f470b
- SSDEEP 393216:mZERPD3w1Hh266NbNyG6iy5l72xJ8iJHQx0CuKqOMlvGz:73TDuG6iyHaVwiCupXlvi
- TLSH T1A607330F72477592F08477D4FA6DD57C199B2C929A294F2CAAD34C31EA08F1206DA6CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Devastate_v2.1/Game.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Devastate_v2.1/Game.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target Devastate_v2.1/Game.exe
- Size 7.2MB
- SHA256 c6bcdbdc876e3559d47d6812bcd4cbd9d9249f6b5d2a7625a2e67ba513430a9d
- MD5 c23aa70bfeedd52538999f74e108c7b2
- SHA1 10f4b13ea2ca2e666aa933c072107e110bb257c5
- SHA512 7667df9eaa7a89b4c13af1cf387f41ede98c8420d2dbaf88fcbdbabd5d27094caea14d2b90c507f91be566f8993f314d65fd2f319f8f2e811f6cae98ba8b8ab8
- SSDEEP 196608:jFTCzYrquYxVlbsqgr8wChFHshAyqyS6AI0/X7ue7JNtC148:yYrAYAI0/X7ueF98
- TLSH T1E776BF10FA91D026E4A2017596AEBBE611783E350F2085E777803BBD7CB47C29973B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.