General
- Target 2026-07-08_babb5ede906383c78608a2c32b7acaad_mespinoza
- Size 1.3MB
- Sample260708-ys3xbaf14m
- SHA256 f108f396991ac912b68c3111c26093bf06bb37d2ac555b340aa551891f945994
- MD5 babb5ede906383c78608a2c32b7acaad
- SHA1 ae93c0a508e21949ed8eb846bb84bc46e58148b1
- SHA512 ec37470710bf85e266bf7c7405ed27e76fb3ab0d3a747fb07177194c8d7fba3856e2c1109d38fa7e60ea291c7352f76b7678a8a2db2357fd1f279606c235f2e9
- SSDEEP 12288:fdVtyzG6yz8ws9nR0uRbVCN6ld5lVvYRMFlvZm6:2G6NR91f5lkoZm6
- TLSH T18255C445B6A80495FCAE9D7489668275FA32BD9F3D2DB20F1C40B22F1F338E15E25721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_babb5ede906383c78608a2c32b7acaad_mespinoza.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_babb5ede906383c78608a2c32b7acaad_mespinoza.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_babb5ede906383c78608a2c32b7acaad_mespinoza
- Size 1.3MB
- SHA256 f108f396991ac912b68c3111c26093bf06bb37d2ac555b340aa551891f945994
- MD5 babb5ede906383c78608a2c32b7acaad
- SHA1 ae93c0a508e21949ed8eb846bb84bc46e58148b1
- SHA512 ec37470710bf85e266bf7c7405ed27e76fb3ab0d3a747fb07177194c8d7fba3856e2c1109d38fa7e60ea291c7352f76b7678a8a2db2357fd1f279606c235f2e9
- SSDEEP 12288:fdVtyzG6yz8ws9nR0uRbVCN6ld5lVvYRMFlvZm6:2G6NR91f5lkoZm6
- TLSH T18255C445B6A80495FCAE9D7489668275FA32BD9F3D2DB20F1C40B22F1F338E15E25721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.