General
- Target produkey197-x64.zip
- Size 106KB
- Sample260708-pepyvsgs9p
- SHA256 e4604e0ee680370448c6a832856dff4a0255ca763672825a7a67a2a4662b9909
- MD5 2ae1a33e4f431bd4e8c36e514f0e522f
- SHA1 f3bba258e4ac425eb018a177dd8b4bcb072014e6
- SHA512 a7ab753293791063cd43e520c7bc6f89003a25b78318a68f03b2f01d2d3f38dc28fe960cea61cb3ca2eb4798ba7f4b2579a552a5fdb035a3c8c78f68ebf77813
- SSDEEP 3072:mUNFLItAccJERja7rrK6VD1K1o1wNhNzFnYNceA0Q:mUNFLItA/E87HDjUmw
- TLSH T174B31281B3BAD660AF5FED7AB1C6C479512DC63A7113F31A262D6EE049B94CC6003CE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ProduKey.chm
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ProduKey.chm
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Behavioral task
behavioral3
Sample
ProduKey.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
ProduKey.exe
Resource
win11ltsc2024-20260706-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target ProduKey.chm
- Size 17KB
- SHA256 674a2d862580b1a8b05fcff0404f3b9c43bfe778ffacc9947ff555188a50f9fe
- MD5 043023f6b2362cdd1b9b6cf766de3f76
- SHA1 70d589cbe067a18a0c61f5e87c2dcfd23491ccb1
- SHA512 f61b5aca5f9011f00c35bafb0490c081e50385dec9c2057d1bb16488fa4dcf059ed76e434c9381cad810ff80aa91610f5e4e28408da093786c69508c88a01b41
- SSDEEP 192:XgaJZ0lf6iHAcbEDkdR11noKB7CBs/emkbtofDTHHKO/UiQkInnJYxj3Dd2:XnJmF+kHdRboKB7C+/rOoPncii0TE
- TLSH T13D82C0BC30B14302E4A5EA3971C0C18E3B587203D8759485A3ED474D9FD196BE2E0AEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target ProduKey.exe
- Size 208KB
- SHA256 6cf9dbed273e35c0719ef691074ec6d84e6a89e5f9674120eec757a501e8564c
- MD5 a5660d680fcd5cdf351132685a0e5f14
- SHA1 740d45572660c5c54b19a55e44ca0ff038a6d82e
- SHA512 ac442f0d72ef17ed11c4ff3c3462ac85a50adccbe226243b53e295854ab3114745a9ad9985e4977641bb0cf9c117a418209d32f5d52e4d475573ad4330911df4
- SSDEEP 6144:CNQFpS3n65DynQtQr6dvYzQCbXAGOPzD7CAVvTWG:CNQ3cn6hyQtQr6dvYEUXAXPHO2vTWG
- TLSH T1A8244B4672A45088E07BD17DCE928737E672746413256BCF0A64CBB91F23BE8B93E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10