General
- Target 49b0a67ce38ee3b5460ea87c6671145faa3b2ba2c74a78e11c42453697d4a5c8.exe
- Size 1.4MB
- Sample260707-knwesad19v
- SHA256 49b0a67ce38ee3b5460ea87c6671145faa3b2ba2c74a78e11c42453697d4a5c8
- MD5 d852600e0ea51cc751aa980484af7d39
- SHA1 6d17eb5b11ebfc9d95d03eabbc1f8b6882a9ef2b
- SHA512 094fcadbcd3538e4133d15b2b4a6a652f69bd7b7e730e97313c47cf757afc06ac786d25931ac3b57012b1fc8505c162e4a6f99a1e96f7e58b1856d35536c793e
- SSDEEP 24576:/qylFH50Dv6RwyeQvt6ot0h9HyrOliruAU:iylFHUv6ReIt0jSrO
- TLSH T14A658D02B25EC2B1D19C147139AF7736AD34966A1B35CAD3B7E0CD7C1E32791AA37209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
49b0a67ce38ee3b5460ea87c6671145faa3b2ba2c74a78e11c42453697d4a5c8.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
49b0a67ce38ee3b5460ea87c6671145faa3b2ba2c74a78e11c42453697d4a5c8.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 49b0a67ce38ee3b5460ea87c6671145faa3b2ba2c74a78e11c42453697d4a5c8.exe
- Size 1.4MB
- SHA256 49b0a67ce38ee3b5460ea87c6671145faa3b2ba2c74a78e11c42453697d4a5c8
- MD5 d852600e0ea51cc751aa980484af7d39
- SHA1 6d17eb5b11ebfc9d95d03eabbc1f8b6882a9ef2b
- SHA512 094fcadbcd3538e4133d15b2b4a6a652f69bd7b7e730e97313c47cf757afc06ac786d25931ac3b57012b1fc8505c162e4a6f99a1e96f7e58b1856d35536c793e
- SSDEEP 24576:/qylFH50Dv6RwyeQvt6ot0h9HyrOliruAU:iylFHUv6ReIt0jSrO
- TLSH T14A658D02B25EC2B1D19C147139AF7736AD34966A1B35CAD3B7E0CD7C1E32791AA37209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.