General
- Target 2026-07-07_7fb4e38eaf99ce3f4087b2e48a34886e_mespinoza
- Size 1.3MB
- Sample260707-y4swgset5j
- SHA256 03e992fc5c7efccbdf6d61026d7c0984d5db557322b512d1b1f6944f612d08a8
- MD5 7fb4e38eaf99ce3f4087b2e48a34886e
- SHA1 e3b409b12fd99bc53ee20423ed928d0d53662e89
- SHA512 a541aca1dae7d24cc886709d9f9c2d980857e00c3cc87bde454547012bf2840f0e71f7aeabe83382719221ba7bfafc8a1184f6df62f436970da9517a7c60e776
- SSDEEP 12288:eVjH7eGKhIsNs9ySogbqa1Nwld5lVvYRMFlvZIApIMeZn+we:xGKRSrOV5lkoZIApIMeZnhe
- TLSH T17D55C441B6A80895FCAE9D7489668275FA32BD9F3D2DB20F1C50B22F1F338D15E25721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_7fb4e38eaf99ce3f4087b2e48a34886e_mespinoza.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_7fb4e38eaf99ce3f4087b2e48a34886e_mespinoza.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_7fb4e38eaf99ce3f4087b2e48a34886e_mespinoza
- Size 1.3MB
- SHA256 03e992fc5c7efccbdf6d61026d7c0984d5db557322b512d1b1f6944f612d08a8
- MD5 7fb4e38eaf99ce3f4087b2e48a34886e
- SHA1 e3b409b12fd99bc53ee20423ed928d0d53662e89
- SHA512 a541aca1dae7d24cc886709d9f9c2d980857e00c3cc87bde454547012bf2840f0e71f7aeabe83382719221ba7bfafc8a1184f6df62f436970da9517a7c60e776
- SSDEEP 12288:eVjH7eGKhIsNs9ySogbqa1Nwld5lVvYRMFlvZIApIMeZn+we:xGKRSrOV5lkoZIApIMeZnhe
- TLSH T17D55C441B6A80895FCAE9D7489668275FA32BD9F3D2DB20F1C50B22F1F338D15E25721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.