General
- Target JustAsPlanned.x64.v1.0.4.2.exe
- Size 163KB
- Sample260708-wfk5mady7n
- SHA256 b12e5a1c127552bd5970d962402ce742a09d97ce3f4bb91a5d18097f18a08fd4
- MD5 e5166a4f7ae416e368461223242cd591
- SHA1 6104d2192b95a8cce9ee7c067aa14ced94befec2
- SHA512 2edd662b0085dfb6615e798e636fa2aceb4b87fbc61c2a814800b2d8bb92402f98262ffdf2f28df2cf17f8a53d590cf3f0e3c5b7df433b2ad2e1d8c087ac7c4c
- SSDEEP 3072:v8rbgJ+PGzbNlbn0+NChClr3vEjqXFboH3vuNRyyVvRGp13AHqTgyjq2q:v8gIAjLvmuj7VasqlP
- TLSH T174F3F12337282E21D6EB97B1A8B1CA50877BF1A6DD37CF8F504522487F43A914E93721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
JustAsPlanned.x64.v1.0.4.2.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
JustAsPlanned.x64.v1.0.4.2.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target JustAsPlanned.x64.v1.0.4.2.exe
- Size 163KB
- SHA256 b12e5a1c127552bd5970d962402ce742a09d97ce3f4bb91a5d18097f18a08fd4
- MD5 e5166a4f7ae416e368461223242cd591
- SHA1 6104d2192b95a8cce9ee7c067aa14ced94befec2
- SHA512 2edd662b0085dfb6615e798e636fa2aceb4b87fbc61c2a814800b2d8bb92402f98262ffdf2f28df2cf17f8a53d590cf3f0e3c5b7df433b2ad2e1d8c087ac7c4c
- SSDEEP 3072:v8rbgJ+PGzbNlbn0+NChClr3vEjqXFboH3vuNRyyVvRGp13AHqTgyjq2q:v8gIAjLvmuj7VasqlP
- TLSH T174F3F12337282E21D6EB97B1A8B1CA50877BF1A6DD37CF8F504522487F43A914E93721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.