General
- Target a487d737fbd002bdceaf34083408400e7b74bb9abcde05127ed998e73f2f6403.exe
- Size 1.6MB
- Sample260707-pwf3aah17v
- SHA256 a487d737fbd002bdceaf34083408400e7b74bb9abcde05127ed998e73f2f6403
- MD5 c14c44b7f7dcb052b0cde318da2f692e
- SHA1 f5763009e47f046637a3bfb74494a8765528c617
- SHA512 373fb1d4b2320000e90e3dde95af96fd6eb69e9c7d7adf65eed8f6187ac85195b53a6cba5e7f6d6a66bcb553a76199f27641c3cbadd16616a80abc1472c96bc6
- SSDEEP 24576:wDrkK6xHZxfsAY8vBKvWu/AAu1e/y8uZp5gvr+:lZKAYaKvww/y8M5gvr+
- TLSH T171753B133F848029E5626EF45E78976A47A9F8301B264BC792C01A5DDDE06C36F34AF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a487d737fbd002bdceaf34083408400e7b74bb9abcde05127ed998e73f2f6403.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
a487d737fbd002bdceaf34083408400e7b74bb9abcde05127ed998e73f2f6403.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target a487d737fbd002bdceaf34083408400e7b74bb9abcde05127ed998e73f2f6403.exe
- Size 1.6MB
- SHA256 a487d737fbd002bdceaf34083408400e7b74bb9abcde05127ed998e73f2f6403
- MD5 c14c44b7f7dcb052b0cde318da2f692e
- SHA1 f5763009e47f046637a3bfb74494a8765528c617
- SHA512 373fb1d4b2320000e90e3dde95af96fd6eb69e9c7d7adf65eed8f6187ac85195b53a6cba5e7f6d6a66bcb553a76199f27641c3cbadd16616a80abc1472c96bc6
- SSDEEP 24576:wDrkK6xHZxfsAY8vBKvWu/AAu1e/y8uZp5gvr+:lZKAYaKvww/y8M5gvr+
- TLSH T171753B133F848029E5626EF45E78976A47A9F8301B264BC792C01A5DDDE06C36F34AF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.