General
- Target c7af187af7361ea55bae801a6cbe27d6b340f5db26d74c28f980b34fbaffa069
- Size 8.7MB
- Sample260707-vreasaa18k
- SHA256 c7af187af7361ea55bae801a6cbe27d6b340f5db26d74c28f980b34fbaffa069
- MD5 ffac6756a35674e37915babac68ab176
- SHA1 81531399e973b31182ca32ba55ef51378a46e95c
- SHA512 6a0b95a017358f17b08854a3565074e8e5b5c97db2462639730ca80d49fe9dbcf823ca2b55a068966686850e6a58bcccbe92f78b51c97e768faf32c64cbf272f
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnp7jov7AU:JSWyZ/K0ttYVAAT1Kmd09ov7AU
- TLSH T15D967C03F2A540E9E1AAD174CE669231DB327C494BF1A5EF3240B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c7af187af7361ea55bae801a6cbe27d6b340f5db26d74c28f980b34fbaffa069.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
c7af187af7361ea55bae801a6cbe27d6b340f5db26d74c28f980b34fbaffa069.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target c7af187af7361ea55bae801a6cbe27d6b340f5db26d74c28f980b34fbaffa069
- Size 8.7MB
- SHA256 c7af187af7361ea55bae801a6cbe27d6b340f5db26d74c28f980b34fbaffa069
- MD5 ffac6756a35674e37915babac68ab176
- SHA1 81531399e973b31182ca32ba55ef51378a46e95c
- SHA512 6a0b95a017358f17b08854a3565074e8e5b5c97db2462639730ca80d49fe9dbcf823ca2b55a068966686850e6a58bcccbe92f78b51c97e768faf32c64cbf272f
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnp7jov7AU:JSWyZ/K0ttYVAAT1Kmd09ov7AU
- TLSH T15D967C03F2A540E9E1AAD174CE669231DB327C494BF1A5EF3240B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1