General
- Target nponq_vv_ptvxk_s.zip
- Size 296KB
- Sample260707-wthawsbw5x
- SHA256 eabd0953f75cbe8b461c7d6e083ecbc54b24569c6ee33cdfb15c509768ac5f84
- MD5 c5894e382191c2d36643b3b53e1a2673
- SHA1 e32ad607302a7e3068954391fec51ca659508721
- SHA512 03af805d47189988aa4b1ec33988fcedad5ce2b5a6883b30e45630a5f1c11eb695460d18616dbd6a1a92ff8cd788b62187b435bfea8d15863d9fd4531e535700
- SSDEEP 6144:lbV3qnBoYo6M3kX/VcI9PTqEpXfD/dDoJ1Ay1C7k:j3qBLxvyIJvpXfD/KJ1r
- TLSH T1685423F8F06A404BBF8B07349BDCE75EA35BE37A5B4420941AF3255381A1B8251E3F16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
nponq_vv_ptvxk_s.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
nponq_vv_ptvxk_s.zip
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target nponq_vv_ptvxk_s.zip
- Size 296KB
- SHA256 eabd0953f75cbe8b461c7d6e083ecbc54b24569c6ee33cdfb15c509768ac5f84
- MD5 c5894e382191c2d36643b3b53e1a2673
- SHA1 e32ad607302a7e3068954391fec51ca659508721
- SHA512 03af805d47189988aa4b1ec33988fcedad5ce2b5a6883b30e45630a5f1c11eb695460d18616dbd6a1a92ff8cd788b62187b435bfea8d15863d9fd4531e535700
- SSDEEP 6144:lbV3qnBoYo6M3kX/VcI9PTqEpXfD/dDoJ1Ay1C7k:j3qBLxvyIJvpXfD/KJ1r
- TLSH T1685423F8F06A404BBF8B07349BDCE75EA35BE37A5B4420941AF3255381A1B8251E3F16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.