General
- Target 2df00072759375b713f6d82c0786436e6dc1d7194b2ccbea15f1ba8d0e27b326
- Size 1.2MB
- Sample260707-kdxvvsdy3s
- SHA256 2df00072759375b713f6d82c0786436e6dc1d7194b2ccbea15f1ba8d0e27b326
- MD5 fe510946cea753e9ec33479924e1fe57
- SHA1 d7fd06d47f20125bc7f6db779e5df2b644904fce
- SHA512 77ae20cb2eb50ae5fb66994ca43d798e099ef5a4a6ef4fa2571f3f288d0cde5a8374e3260d2126c9d6f42af893cb5eca35d1efe641a54eef160ed80f6d945c7a
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhg:AylFHUv6ReIt0jSrOU
- TLSH T185457D12765D81B1D19C14702D6F7336A9306A193B32CEE3B7D2DD789E32BD1AE36209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2df00072759375b713f6d82c0786436e6dc1d7194b2ccbea15f1ba8d0e27b326.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2df00072759375b713f6d82c0786436e6dc1d7194b2ccbea15f1ba8d0e27b326.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2df00072759375b713f6d82c0786436e6dc1d7194b2ccbea15f1ba8d0e27b326
- Size 1.2MB
- SHA256 2df00072759375b713f6d82c0786436e6dc1d7194b2ccbea15f1ba8d0e27b326
- MD5 fe510946cea753e9ec33479924e1fe57
- SHA1 d7fd06d47f20125bc7f6db779e5df2b644904fce
- SHA512 77ae20cb2eb50ae5fb66994ca43d798e099ef5a4a6ef4fa2571f3f288d0cde5a8374e3260d2126c9d6f42af893cb5eca35d1efe641a54eef160ed80f6d945c7a
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhg:AylFHUv6ReIt0jSrOU
- TLSH T185457D12765D81B1D19C14702D6F7336A9306A193B32CEE3B7D2DD789E32BD1AE36209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.