General
- Target ENTRA ID.rar
- Size 12.1MB
- Sample260707-l56gracv9p
- SHA256 6c542d9d5bc81e7f299942e04478832b1bd3956fbbbe8e6398e82072c9e02504
- MD5 11abdfd76e1124e3f3379ab78477dcef
- SHA1 f7f5eb9485f241219f8352147578c7747b43c224
- SHA512 cd40aea775e99ef8178fa4a36aa7af1b8ca8c37ed03ae3089cb3fe203a65c8de328a3e4ccba2822f6b3d5ae8a1c2317a98a83b6fb0a783abc0d018138c30f6b7
- SSDEEP 393216:m0i6Y/T/No1E/6jdl8W7uOYpk6K2+s8Zh3C5D:mp/ho1E/63lWK2x8Z9CJ
- TLSH T1D9D633353D02AF8FD27419F7B2C42C613BAC7BD32D22275D61C29E6C8B1C95D97920A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ENTRA ID/View the Entra Group Users.rar
Resource
win11ltsc2024-20260706-en
15 signatures
900 seconds
Malware Config
Targets
-
- Target ENTRA ID/View the Entra Group Users.rar
- Size 3.4MB
- SHA256 98856c1c8b6e7f7ca54d41b41bbd562a864126b0c4948f1da8f622efda2e8eed
- MD5 bc17b2016d4af37ae055e9abaf90a38d
- SHA1 1260e657a4cdc1be0029504d0be6d3c75cf19dd9
- SHA512 a0ef4b8c4c63b60742064d60e0c74d7d04655827b3ee871e1b37d6b1e5b4fa8c849f1d5414aa72bea79ad535f29160b64f426cf020551318ca8b197be3344d89
- SSDEEP 98304:mdqBG8t1ccajtYJtwdk+BlYPcEKxRW3S+qGi:mdWGsKduwSyYvKRWit
- TLSH T1B4F5332A1C02DBCDC83445FF6D8E9C3167B8BBD71D13CA9F9A80B61C4B985A78761391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.