General
- Target TraceArt.exe
- Size 26.1MB
- Sample260709-ebadwsds3x
- SHA256 deb331957a92d675734375b7b6e833a07ca3053605bff7d2ce50508c3ff36dd8
- MD5 c4a2bb05ea8e80d4b69203a0503383a1
- SHA1 341c62c60b9aadd6aa23b346dee4fdcd0f231549
- SHA512 31cb5aa9d826b13069937c8257179b68ae229861b87f3ff42bc1f762360ad1d92c3adadb1299bfd52f4f98c87c7b4f52cc90efd18a9fd5237ece846879b05fd4
- SSDEEP 786432:vvR5W8j1QtIZhPA5HtL2/Mb3ILh5tht+ogsQq0:v/WCiIZhPytiMbGhNtbtQB
- TLSH T1BD5733C83B1B58DCE88A223150E1C6539DE6789B07A1C6CF5BBC05521DA72E4FE7C7A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
TraceArt.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
TraceArt.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Behavioral task
behavioral3
Sample
TraceArt.pyc
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
TraceArt.pyc
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target TraceArt.exe
- Size 26.1MB
- SHA256 deb331957a92d675734375b7b6e833a07ca3053605bff7d2ce50508c3ff36dd8
- MD5 c4a2bb05ea8e80d4b69203a0503383a1
- SHA1 341c62c60b9aadd6aa23b346dee4fdcd0f231549
- SHA512 31cb5aa9d826b13069937c8257179b68ae229861b87f3ff42bc1f762360ad1d92c3adadb1299bfd52f4f98c87c7b4f52cc90efd18a9fd5237ece846879b05fd4
- SSDEEP 786432:vvR5W8j1QtIZhPA5HtL2/Mb3ILh5tht+ogsQq0:v/WCiIZhPytiMbGhNtbtQB
- TLSH T1BD5733C83B1B58DCE88A223150E1C6539DE6789B07A1C6CF5BBC05521DA72E4FE7C7A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target TraceArt.pyc
- Size 32KB
- SHA256 7b58b3b656c948d97fb1bef9a0d367f51acc6ec36b84099c68851ab0ee249473
- MD5 0bbad83ad9f36045297089f93c6ff3e1
- SHA1 ca64d4552e31d1a39deddc6482cbdf183c5cf3aa
- SHA512 6766770592efb6b2ea0b9ddbde3615bcd567c2f0808662e239c34ffc653be492e072cb092ba8b186b900ed1ec7fc0ff889777804f39362479e5eee6c550c733d
- SSDEEP 768:AACvBWs6g1Z3CekdBiTBYQLapZ5j1OnQsaceVVGj0:A9vEs6g1ZRuBiTBYQLapZVI5ngVGY
- TLSH T1A9E2D785BB63C133FCA9F1BA4C5A379AF3A486B07715931B90F781B01E87A618D810DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.