General
- Target c152343fdabef79ba2ea452a3276c93304458e07e5ce9b44811238434f933048
- Size 5.9MB
- Sample260706-t7jprsdx5k
- SHA256 c152343fdabef79ba2ea452a3276c93304458e07e5ce9b44811238434f933048
- MD5 a5fbfcd296d393f389c7174aacc8ca55
- SHA1 2513d7260c7ce9a846dfc8b350b76f936aaf377f
- SHA512 d14d041a91a25f27ee822a6d06102449e924f8c6cf289bcdedf22ad59ded2ed313189fb7d2452d3b79ebc0f78721a449d228a520d301a81fc8522570dc30c2b8
- SSDEEP 98304:JdIaYZfR3T0Ks2n7S6awFoUn9CGS1ODEsBKJ10oudlGBSyUT8oYkbgQkp69Z:JvYxRj/W6aVU9iODZKJ10JdlGBt/oJpV
- TLSH T1B0561217B24E673FE0AA4A354A739950543FBA60642ACCA7D6E40E4CCF2D0911E7FF46
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
c152343fdabef79ba2ea452a3276c93304458e07e5ce9b44811238434f933048.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
c152343fdabef79ba2ea452a3276c93304458e07e5ce9b44811238434f933048.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target c152343fdabef79ba2ea452a3276c93304458e07e5ce9b44811238434f933048
- Size 5.9MB
- SHA256 c152343fdabef79ba2ea452a3276c93304458e07e5ce9b44811238434f933048
- MD5 a5fbfcd296d393f389c7174aacc8ca55
- SHA1 2513d7260c7ce9a846dfc8b350b76f936aaf377f
- SHA512 d14d041a91a25f27ee822a6d06102449e924f8c6cf289bcdedf22ad59ded2ed313189fb7d2452d3b79ebc0f78721a449d228a520d301a81fc8522570dc30c2b8
- SSDEEP 98304:JdIaYZfR3T0Ks2n7S6awFoUn9CGS1ODEsBKJ10oudlGBSyUT8oYkbgQkp69Z:JvYxRj/W6aVU9iODZKJ10JdlGBt/oJpV
- TLSH T1B0561217B24E673FE0AA4A354A739950543FBA60642ACCA7D6E40E4CCF2D0911E7FF46
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.