General
- Target 4a72842ff25b47bc912714046a833ace69d6cb68f8f2be8d65a6421c4a9cc5a1.exe
- Size 31.5MB
- Sample260708-wtj5gsft8z
- SHA256 4a72842ff25b47bc912714046a833ace69d6cb68f8f2be8d65a6421c4a9cc5a1
- MD5 142695c2b211f515a7698122a6bc6abc
- SHA1 2e38eea1c132ca7c39db916b760326f62812bc3e
- SHA512 f7d8939698e47005ecf69dc74be8b9b0ad4a6c1ba17f4daa5af5e3dd2055004139439a9495aab439313681b5988ce8dc0e6bcf4716540377cd3878f9d9b4d1b3
- SSDEEP 786432:ZPas/xJMheCMyXiFvW8wL5W+NjlZcKAj7dzvVgax5q2j3W4cqwyi1sL:ZPas/XMheC9yFvW3NNB1o7YEq27WfLDm
- TLSH T12B77336C6A921588F0D7543BFDB3983F924339512B30458F9FE82E9639D31E0AD68763
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4a72842ff25b47bc912714046a833ace69d6cb68f8f2be8d65a6421c4a9cc5a1.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4a72842ff25b47bc912714046a833ace69d6cb68f8f2be8d65a6421c4a9cc5a1.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 4a72842ff25b47bc912714046a833ace69d6cb68f8f2be8d65a6421c4a9cc5a1.exe
- Size 31.5MB
- SHA256 4a72842ff25b47bc912714046a833ace69d6cb68f8f2be8d65a6421c4a9cc5a1
- MD5 142695c2b211f515a7698122a6bc6abc
- SHA1 2e38eea1c132ca7c39db916b760326f62812bc3e
- SHA512 f7d8939698e47005ecf69dc74be8b9b0ad4a6c1ba17f4daa5af5e3dd2055004139439a9495aab439313681b5988ce8dc0e6bcf4716540377cd3878f9d9b4d1b3
- SSDEEP 786432:ZPas/xJMheCMyXiFvW8wL5W+NjlZcKAj7dzvVgax5q2j3W4cqwyi1sL:ZPas/XMheC9yFvW3NNB1o7YEq27WfLDm
- TLSH T12B77336C6A921588F0D7543BFDB3983F924339512B30458F9FE82E9639D31E0AD68763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.