General
- Target farware.exe
- Size 233B
- Sample260708-m11alsev5w
- SHA256 3a1275ca25ab58f0d8770c9eb1c51a7850eaf86290a7b06caa4e589a8dcedb14
- MD5 2bc3ab24b547520b709652ed0996a714
- SHA1 fd1ee12296b39e1144287ed78a5e605177df8fa0
- SHA512 a2f97aea6a327cc24f6a6185350382f5e9ba74e9ac486a8e7302144d92d6983c124863d0425fd05e2fd1ff5fd64214af4d65e3502f8bb1e0094cce1ba64cf0be
- TLSH T1D9D0A762A262B41E5495A5266109F75DEA2290E15288362C9550CD8263CE0696C46642
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
farware.xml
Resource
win10v2004-20260513-en
15 signatures
300 seconds
Behavioral task
behavioral2
Sample
farware.xml
Resource
win11ltsc2024-20260706-en
20 signatures
300 seconds
Malware Config
Targets
-
- Target farware.exe
- Size 233B
- SHA256 3a1275ca25ab58f0d8770c9eb1c51a7850eaf86290a7b06caa4e589a8dcedb14
- MD5 2bc3ab24b547520b709652ed0996a714
- SHA1 fd1ee12296b39e1144287ed78a5e605177df8fa0
- SHA512 a2f97aea6a327cc24f6a6185350382f5e9ba74e9ac486a8e7302144d92d6983c124863d0425fd05e2fd1ff5fd64214af4d65e3502f8bb1e0094cce1ba64cf0be
- TLSH T1D9D0A762A262B41E5495A5266109F75DEA2290E15288362C9550CD8263CE0696C46642
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.