General
- Target Leitostrap.exe
- Size 47.9MB
- Sample260708-ds7kaaas4t
- SHA256 d812a16d2d0b991bd7f2ce965143e154ffe236a513ad61583d421ecb25924f5e
- MD5 9ffb820739b1a992cfc0da8aba462ad3
- SHA1 37767b983eb2aa44e6751975b5edd33135261ca2
- SHA512 e1653884f5dcff2afb66ead7c9296588c21b62d0b068740762320d6642302cec7d14cc99e7fcf667381e5f72841ed8043bcf3343d92892572eb42084a0e94c3a
- SSDEEP 786432:w+gX4BMdhwzTQXR5FbPp3CYFcSS5U/LT2KVVyPVLIvdcWzbWlA68VCu0LhX5m43u:WXGMK4XR3b9CHSCU/+UyPlKcWzbWm6eR
- TLSH T18BB73312F2D409E5F9FB6A3497628341EB19749D8B31C1FB00E102535D7B9782B73AB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Leitostrap.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Leitostrap.exe
Resource
win11ltsc2024-20260706-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target Leitostrap.exe
- Size 47.9MB
- SHA256 d812a16d2d0b991bd7f2ce965143e154ffe236a513ad61583d421ecb25924f5e
- MD5 9ffb820739b1a992cfc0da8aba462ad3
- SHA1 37767b983eb2aa44e6751975b5edd33135261ca2
- SHA512 e1653884f5dcff2afb66ead7c9296588c21b62d0b068740762320d6642302cec7d14cc99e7fcf667381e5f72841ed8043bcf3343d92892572eb42084a0e94c3a
- SSDEEP 786432:w+gX4BMdhwzTQXR5FbPp3CYFcSS5U/LT2KVVyPVLIvdcWzbWlA68VCu0LhX5m43u:WXGMK4XR3b9CHSCU/+UyPlKcWzbWm6eR
- TLSH T18BB73312F2D409E5F9FB6A3497628341EB19749D8B31C1FB00E102535D7B9782B73AB9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Enumerates processes with tasklist