General
- Target LagSwitch - Main.exe
- Size 7.8MB
- Sample260708-cmy6aaas2n
- SHA256 ac18d0274d0070e0952230ce321ccc46bca1d9ac05ad67ba141e9497ac12300d
- MD5 0b3c2746b4d37bec999a5c81cdd9d598
- SHA1 590e2598c3ec94069c7952a8ceb1b710c436ef6f
- SHA512 dabda3c41fed1514be09fc230143958804ca535ff3fcb46379acf45352783198bdc364a6c992b41f5c8f5d3162892e3654ad2dc5b90755dbdd4a8686538edcf1
- SSDEEP 196608:H5uY3aJDfyGlW21X5Sp6GemDMPwYWc1Lm0pAYPl/Zft:oY3aJDfDllpfaMPdJ6eft
- TLSH T1508633A4A1100AEADCF6513E8881C7146A73B87343A5EB8B57F587972F57BA45C3EF00
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
LagSwitch - Main.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
LagSwitch - Main.exe
Resource
win11ltsc2024-20260706-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
LagSwitch - Main.pyc
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
LagSwitch - Main.pyc
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target LagSwitch - Main.exe
- Size 7.8MB
- SHA256 ac18d0274d0070e0952230ce321ccc46bca1d9ac05ad67ba141e9497ac12300d
- MD5 0b3c2746b4d37bec999a5c81cdd9d598
- SHA1 590e2598c3ec94069c7952a8ceb1b710c436ef6f
- SHA512 dabda3c41fed1514be09fc230143958804ca535ff3fcb46379acf45352783198bdc364a6c992b41f5c8f5d3162892e3654ad2dc5b90755dbdd4a8686538edcf1
- SSDEEP 196608:H5uY3aJDfyGlW21X5Sp6GemDMPwYWc1Lm0pAYPl/Zft:oY3aJDfDllpfaMPdJ6eft
- TLSH T1508633A4A1100AEADCF6513E8881C7146A73B87343A5EB8B57F587972F57BA45C3EF00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target LagSwitch - Main.pyc
- Size 7KB
- SHA256 bba62ab59560d7cf75cf628d263a3e5b738cbc48f96b7a99b577b5d2e0876f1e
- MD5 175333404494894949fbc4df0f71a646
- SHA1 9b0e98588fee0e8badd685fd00d9086a711e262d
- SHA512 735756fe5c11392c66c5b07b50eeeaf601210d7ffdca34967a8375ce83432d94994dcd135bb200b25dc1ea8e5a5905920df81aac8ab8f5463106c6834171e6d8
- SSDEEP 192:OkNuRSabdxg4L8XfHFjAHHRwSK7nvMylpXh:OKukKnANjyRwSKzHR
- TLSH T11EF194A07B83D87BF858F7BAD825124BF372C4F4E318CB736216C0AA4C5A2186C555CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.