General
- Target clip64.dll
- Size 117KB
- Sample260709-agyw8aax4k
- SHA256 2b5fa9b9db15a70b3f902632459d1fec97dc834149dc2a0bd5e8e04c6c3f494b
- MD5 4f2ab71e9c4270548b3d8e9e62bd7279
- SHA1 06dfe02acdeae34dac7f09584d0d75c750fc38a6
- SHA512 9241a4803469adc363aae0ae53b359daceb6286e90808505ee81ccfc9a5def7eac6855535765cb31e2f2dd8a2ecd3814631f0553502cc0fa7d132fcaf2de150b
- SSDEEP 3072:jYOCGInnVo+TOVQET2bGWG6ZoRgK1vVy5RmVSb:jGVi/8GWPZIkaSb
- TLSH T193C35A213467C071E99D597E1CA8BBF0476D7910DFA14DE73B840A279E206D3AE38D3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
clip64.dll
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
clip64.dll
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target clip64.dll
- Size 117KB
- SHA256 2b5fa9b9db15a70b3f902632459d1fec97dc834149dc2a0bd5e8e04c6c3f494b
- MD5 4f2ab71e9c4270548b3d8e9e62bd7279
- SHA1 06dfe02acdeae34dac7f09584d0d75c750fc38a6
- SHA512 9241a4803469adc363aae0ae53b359daceb6286e90808505ee81ccfc9a5def7eac6855535765cb31e2f2dd8a2ecd3814631f0553502cc0fa7d132fcaf2de150b
- SSDEEP 3072:jYOCGInnVo+TOVQET2bGWG6ZoRgK1vVy5RmVSb:jGVi/8GWPZIkaSb
- TLSH T193C35A213467C071E99D597E1CA8BBF0476D7910DFA14DE73B840A279E206D3AE38D3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.