General
- Target 58e3e75326f07ad76d9fbd9c0e7896974df6ca38d8f5ef08a3d930d6a6c37e4c.exe
- Size 814KB
- Sample260707-stj8psgz2k
- SHA256 58e3e75326f07ad76d9fbd9c0e7896974df6ca38d8f5ef08a3d930d6a6c37e4c
- MD5 764dced13c705a3cf6313f879bc2804b
- SHA1 ccf6eb9ef650de0f65f211122229f377ee2c1523
- SHA512 0dae49494d08df005da41b1846eac373e00a8c32c51cb79ee8368473e78382626a4750d744a55792a25ee00df84f3be4da47d1682c8f661756d958ad6c272f77
- SSDEEP 12288:Uk353ix/OHilzKi3E13hsBEhijE8wpVlSW/CKR15XpN9dhIzHeZ:Uk3pix/OClb0HsBsxpbrqKR1N92HW
- TLSH T1FF05CF2C3DC68689C6789F75C6B35B4837F1D94BD782E3077EDA20A8881FB96C501E16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
58e3e75326f07ad76d9fbd9c0e7896974df6ca38d8f5ef08a3d930d6a6c37e4c.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
58e3e75326f07ad76d9fbd9c0e7896974df6ca38d8f5ef08a3d930d6a6c37e4c.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 58e3e75326f07ad76d9fbd9c0e7896974df6ca38d8f5ef08a3d930d6a6c37e4c.exe
- Size 814KB
- SHA256 58e3e75326f07ad76d9fbd9c0e7896974df6ca38d8f5ef08a3d930d6a6c37e4c
- MD5 764dced13c705a3cf6313f879bc2804b
- SHA1 ccf6eb9ef650de0f65f211122229f377ee2c1523
- SHA512 0dae49494d08df005da41b1846eac373e00a8c32c51cb79ee8368473e78382626a4750d744a55792a25ee00df84f3be4da47d1682c8f661756d958ad6c272f77
- SSDEEP 12288:Uk353ix/OHilzKi3E13hsBEhijE8wpVlSW/CKR15XpN9dhIzHeZ:Uk3pix/OClb0HsBsxpbrqKR1N92HW
- TLSH T1FF05CF2C3DC68689C6789F75C6B35B4837F1D94BD782E3077EDA20A8881FB96C501E16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.