General
- Target Id_malicious.zip
- Size 8.0MB
- Sample260709-fyfpvsdx8y
- SHA256 da72a3c6b7535a46b8a09ec6f4d6415254b4d9a7f1d3fbbfbc3469d6b6eaf39d
- MD5 6acd4e57163168409282598213a7a0b2
- SHA1 cedc6bb629b6f6e86681af8240d87d3dc32ccee2
- SHA512 c3dfd66820c32e9ad45f101752a589ff3507c5f5a096fefe490bfc79f232a3f5533ebe106d88417c8ed67cd6d4081d5d79ec2cadd4e90cf3a84eb7f0117396e1
- SSDEEP 196608:nveZWBO6ai4jQnfyWuYSRfCO/edWGoIZIckRSZNU88b1pYh+I:vQW0g4jYaZ/5GjI14ZN41Wht
- TLSH T111863398362F2CDAA50AA182C0D637C8971589D1CD906620FF5367690A8F7EC467FDFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
idmalicious.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
idmalicious.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target idmalicious.exe
- Size 8.2MB
- SHA256 f5bfcba096fe996fa7446b28c20fe4dc285ce8049a629e304a8f044143fa250d
- MD5 c034dc6b8adb4ace91cc6cd349f06287
- SHA1 e011a18e66d64e29b155ce18397c65f715d40451
- SHA512 80ff13018ba38af7e22c43d8036c637bfbd3212d1291bc9648880b5528c17bcfa114ff733f76980924ce6f0c6dd95d59035db8282aa3555328879f02b40ad059
- SSDEEP 196608:06v8ZdNoIHUdQmR8dA6luA8Qnf2ODjMnGydS8FKGPbOaID3XhH0:hqdmdQJluIF3MnG38gGPbi3RH
- TLSH T1C8963351B7981CEAF8675138C046D16DDB31BC9147A0D76703E49A6A2F0B7E02E3FB98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.