General
- Target 6d4a12859f0ad95732ee9a98882cb2c072cda30319078ff7507dedda046afc09.zip
- Size 485KB
- Sample260708-ezy26abv6k
- SHA256 e63bf01576b863e3e0e6bce0932ae3b9318e15f28c5d7725c62603e7a8949575
- MD5 e19db275a64a5aab63bd18ec3578bee7
- SHA1 9bb7e5b3d0a16d9cfa9828787d546a3b77272dfe
- SHA512 8d2acdba9732ebdd2d0ee2feb835a284a8486cf6940089900c681a9b390f378591f9aeeaafacd2282401f7136b73406c3bf8987a695b77231740cfd5d53734a3
- SSDEEP 12288:H4bgHUEqB2q8gKaEWSCWriFAnq+xIk3/Ec:HC3EXq8Fn74AqqIkP/
- TLSH T1AEB423F2C681E9AAC959C7DD910D7BB9CA2FB31FC710376D3614B19084896339E2B80C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
6d4a12859f0ad95732ee9a98882cb2c072cda30319078ff7507dedda046afc09.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
6d4a12859f0ad95732ee9a98882cb2c072cda30319078ff7507dedda046afc09.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 6d4a12859f0ad95732ee9a98882cb2c072cda30319078ff7507dedda046afc09
- Size 794KB
- SHA256 6d4a12859f0ad95732ee9a98882cb2c072cda30319078ff7507dedda046afc09
- MD5 54712812a72f67e13f2d79fb46cc18b4
- SHA1 2714fb84a17a6ef1467aad3f6255dc1bc7d2c966
- SHA512 578f570bd8f3163e186c9d5a882f38a36f12ba41fee0b15ecad8246bbf1968ede1f98e2378d013d94232940d65630a4bb2f81c9e0b92be0a1758130e6a20917b
- SSDEEP 12288:YnrePWUGXJzhK+goKITpz/bSePLQiEBltsVy6Wy4S3:YrCWUGS+gITpj2E7s0VyxyJ
- TLSH T1A205AEE5795E76BBC00A1CBA8E568E6274EC57B287504C93FFD53EBA4910CC31623932
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.