General
- Target _b2e710a1351a40d27575483ebe16cf0c2c5e3977c36eed9efb6901a49e4688b9.txt
- Size 1.7MB
- Sample260708-mp52qaet9w
- SHA256 b2e710a1351a40d27575483ebe16cf0c2c5e3977c36eed9efb6901a49e4688b9
- MD5 e64793c5d1d85fcbeef859dd62e50ea2
- SHA1 019dd64437c3e9a3b0fff0c0b4bf15b9968a6dfc
- SHA512 37a73b75361f937966cc470fb877f5d5be9f25feedcb024115c801a81db1f5b98e2ad95a960f00c9ddb023b82d89d6ee59fd6e1be1029621e34baf800e0f9a97
- SSDEEP 49152:v/YtW5afYTM7KS0gv3ewLthldBCfNGmBOENz:Ht
- TLSH T1BD850280EE5A0D9DB7CD73FDA990814EF724F5A243B8C8BC9A7C5867857D5CB10E2221
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
_b2e710a1351a40d27575483ebe16cf0c2c5e3977c36eed9efb6901a49e4688b9.hta
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
_b2e710a1351a40d27575483ebe16cf0c2c5e3977c36eed9efb6901a49e4688b9.hta
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target _b2e710a1351a40d27575483ebe16cf0c2c5e3977c36eed9efb6901a49e4688b9.txt
- Size 1.7MB
- SHA256 b2e710a1351a40d27575483ebe16cf0c2c5e3977c36eed9efb6901a49e4688b9
- MD5 e64793c5d1d85fcbeef859dd62e50ea2
- SHA1 019dd64437c3e9a3b0fff0c0b4bf15b9968a6dfc
- SHA512 37a73b75361f937966cc470fb877f5d5be9f25feedcb024115c801a81db1f5b98e2ad95a960f00c9ddb023b82d89d6ee59fd6e1be1029621e34baf800e0f9a97
- SSDEEP 49152:v/YtW5afYTM7KS0gv3ewLthldBCfNGmBOENz:Ht
- TLSH T1BD850280EE5A0D9DB7CD73FDA990814EF724F5A243B8C8BC9A7C5867857D5CB10E2221
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.