General
- Target vconvwin.exe
- Size 847KB
- Sample260708-3xfd2aaw3r
- SHA256 30d8964a8a6f0f3ed2ca3d3e864865c085f67ff8865d2c9eb6e96b0d00629b98
- MD5 37edde04e82f7382701be98b0fa96f0e
- SHA1 66ed7c4a1415d23c76d45d68f7e289a9e261271e
- SHA512 a77823ca1abe46e4f540846df662aec04baa72bd904d258fd203159bec4ac8efc80b64e510822025a34ce881ba1e81ce7bfedc7e4d98e22848fa294611a6b667
- SSDEEP 12288:ivNRDfKP3DgkhfxcFm7gCelgdjj1sdb4KE+yNGwR:ifDfk3rVxxegduA+yNG
- TLSH T15905E3D0AD73CE26E0227630099FD6B57169ED3C0E6176A3A2DC3D3B39714D8163B61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
vconvwin.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
vconvwin.exe
Resource
win11ltsc2024-20260706-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target vconvwin.exe
- Size 847KB
- SHA256 30d8964a8a6f0f3ed2ca3d3e864865c085f67ff8865d2c9eb6e96b0d00629b98
- MD5 37edde04e82f7382701be98b0fa96f0e
- SHA1 66ed7c4a1415d23c76d45d68f7e289a9e261271e
- SHA512 a77823ca1abe46e4f540846df662aec04baa72bd904d258fd203159bec4ac8efc80b64e510822025a34ce881ba1e81ce7bfedc7e4d98e22848fa294611a6b667
- SSDEEP 12288:ivNRDfKP3DgkhfxcFm7gCelgdjj1sdb4KE+yNGwR:ifDfk3rVxxegduA+yNG
- TLSH T15905E3D0AD73CE26E0227630099FD6B57169ED3C0E6176A3A2DC3D3B39714D8163B61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.