General
- Target 1daf7297d4fa43b0238cb0cb383e05b01e9c4648a0f8f8a65c6f51124be80b8b.exe
- Size 50.3MB
- Sample260707-vf5ctsaz4k
- SHA256 1daf7297d4fa43b0238cb0cb383e05b01e9c4648a0f8f8a65c6f51124be80b8b
- MD5 26565f277ea6ee6a9a79f02302fdb836
- SHA1 96130cd71bb1caa26fa6e606fd4f462de382d01c
- SHA512 304e948587c56b218a285f0540bd68552ccaab5b93eed9c56d5a2a7c9c0aec009331daa4921bce28359b1c0c8f6a050f52048fa2564266dd28672d600d371984
- SSDEEP 1572864:hIVoA1VSGYEhVGHjewsH2FVu0ADjQKoFeLiK:hIVogVJnhVTMVEDjQKoFeLiK
- TLSH T171C71256E2BD00E8D47BC0B8C6574A17EBB1345513306BEB66A48A692F33FE16E7D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1daf7297d4fa43b0238cb0cb383e05b01e9c4648a0f8f8a65c6f51124be80b8b.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
1daf7297d4fa43b0238cb0cb383e05b01e9c4648a0f8f8a65c6f51124be80b8b.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 1daf7297d4fa43b0238cb0cb383e05b01e9c4648a0f8f8a65c6f51124be80b8b.exe
- Size 50.3MB
- SHA256 1daf7297d4fa43b0238cb0cb383e05b01e9c4648a0f8f8a65c6f51124be80b8b
- MD5 26565f277ea6ee6a9a79f02302fdb836
- SHA1 96130cd71bb1caa26fa6e606fd4f462de382d01c
- SHA512 304e948587c56b218a285f0540bd68552ccaab5b93eed9c56d5a2a7c9c0aec009331daa4921bce28359b1c0c8f6a050f52048fa2564266dd28672d600d371984
- SSDEEP 1572864:hIVoA1VSGYEhVGHjewsH2FVu0ADjQKoFeLiK:hIVogVJnhVTMVEDjQKoFeLiK
- TLSH T171C71256E2BD00E8D47BC0B8C6574A17EBB1345513306BEB66A48A692F33FE16E7D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.