General
- Target Leonardo 0.17.70 Multilingual Beta [FileCR].zip
- Size 7.8MB
- Sample260707-s8y1eahw3k
- SHA256 e3bc323582a1de50449cbbfd1e6d602e436c16cf44587d6b86c13945376db7f6
- MD5 20d916c9cb81fa948f3d1b639326caee
- SHA1 bc69496b1bfc8b98a75ed812f5580c175d92414a
- SHA512 b649e758c36346ea003afbabb7b29e58184ba0ebbe493376723ae9632867f182c96b02170745e886d91976075ac2e3a4a5622cf5fced888f00341c5aa2c0d939
- SSDEEP 196608:oFdF6lZBu84T2jfNRaB5aF9A0e3cAKbvg/oDNU6dLsOU7Ftb2:oFcBu+RSULA/wvumK73a
- TLSH T12D8633DFB7457B00B5D87481E74A269CE2A046B3A848813101ADB25C9F5F7773EAB1B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Leonardo 0.17.70 Multilingual Beta [FileCR].zip
Resource
win10v2004-20260513-en
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
Leonardo 0.17.70 Multilingual Beta [FileCR].zip
Resource
win11ltsc2024-20260706-en
10 signatures
300 seconds
Malware Config
Targets
-
- Target Leonardo 0.17.70 Multilingual Beta [FileCR].zip
- Size 7.8MB
- SHA256 e3bc323582a1de50449cbbfd1e6d602e436c16cf44587d6b86c13945376db7f6
- MD5 20d916c9cb81fa948f3d1b639326caee
- SHA1 bc69496b1bfc8b98a75ed812f5580c175d92414a
- SHA512 b649e758c36346ea003afbabb7b29e58184ba0ebbe493376723ae9632867f182c96b02170745e886d91976075ac2e3a4a5622cf5fced888f00341c5aa2c0d939
- SSDEEP 196608:oFdF6lZBu84T2jfNRaB5aF9A0e3cAKbvg/oDNU6dLsOU7Ftb2:oFcBu+RSULA/wvumK73a
- TLSH T12D8633DFB7457B00B5D87481E74A269CE2A046B3A848813101ADB25C9F5F7773EAB1B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.