General
- Target i00hqHrGFr
- Size 62.9MB
- Sample260709-aalcjsaw6k
- SHA256 8b3f0c4984c5448977c3e7e8330504b949a1c4fc47772697ceb07beb4710b87d
- MD5 98d1e966010f88e0bf26f414f2f0f55a
- SHA1 ea18659fa43b9005b85eb7bc788dc7fedd2f9f8b
- SHA512 35c9516f27ae101cdf01cd719709f93f92653c67c2b3297d956e8ea609e30c77c81e6c36337184ee5cd4e96d0c0ca673b2ecf4e1cd35b269a49d4d5a714ea736
- SSDEEP 1572864:RAb5tU/EvsBLTW4qIIbDNCRJ062JC3JuuODB7SUOTa1Z5a:RAb5tUesoaI/NS2KJ0DUUaa1ZA
- TLSH T1F6E73337F149523BE0AA2B355EB3A024883B96504D928D1BC7EC759CDB356303E7B297
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
i00hqHrGFr.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
i00hqHrGFr.exe
Resource
win11ltsc2024-20260706-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target i00hqHrGFr
- Size 62.9MB
- SHA256 8b3f0c4984c5448977c3e7e8330504b949a1c4fc47772697ceb07beb4710b87d
- MD5 98d1e966010f88e0bf26f414f2f0f55a
- SHA1 ea18659fa43b9005b85eb7bc788dc7fedd2f9f8b
- SHA512 35c9516f27ae101cdf01cd719709f93f92653c67c2b3297d956e8ea609e30c77c81e6c36337184ee5cd4e96d0c0ca673b2ecf4e1cd35b269a49d4d5a714ea736
- SSDEEP 1572864:RAb5tU/EvsBLTW4qIIbDNCRJ062JC3JuuODB7SUOTa1Z5a:RAb5tUesoaI/NS2KJ0DUUaa1ZA
- TLSH T1F6E73337F149523BE0AA2B355EB3A024883B96504D928D1BC7EC759CDB356303E7B297
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Adds Run key to start application
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1