General
- Target 4dadb0dd039f692b0d975a770b28debcbdef013051f74c68fac20b4b3f99c020.exe
- Size 2.4MB
- Sample260709-hdan8aew4y
- SHA256 4dadb0dd039f692b0d975a770b28debcbdef013051f74c68fac20b4b3f99c020
- MD5 24d4eeabdd5686264c91c4c18b2ab0a2
- SHA1 dc5c572b595d912a21bcc428aa6afbe9d49431a8
- SHA512 1b669d186f9b77c232713f4c7a029e80989dd981a33aebe3c3ff1c66d1e805398125fdf1c6c3162ef8450205c6ea7830cc28877f783619017610dac0f97ce077
- SSDEEP 49152:LlrCnS9mVb0Xq0oSj/6ln2/6wzqZpVj93DxmYGEsI0KDBnp:L4SwVb06ajw2SweZpVj9TxmpuJp
- TLSH T169C53387ABD1FAE5E82885F46E8848C04643DF5C842046F4FD9CBBB7EB418578A5C7D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4dadb0dd039f692b0d975a770b28debcbdef013051f74c68fac20b4b3f99c020.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
4dadb0dd039f692b0d975a770b28debcbdef013051f74c68fac20b4b3f99c020.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 4dadb0dd039f692b0d975a770b28debcbdef013051f74c68fac20b4b3f99c020.exe
- Size 2.4MB
- SHA256 4dadb0dd039f692b0d975a770b28debcbdef013051f74c68fac20b4b3f99c020
- MD5 24d4eeabdd5686264c91c4c18b2ab0a2
- SHA1 dc5c572b595d912a21bcc428aa6afbe9d49431a8
- SHA512 1b669d186f9b77c232713f4c7a029e80989dd981a33aebe3c3ff1c66d1e805398125fdf1c6c3162ef8450205c6ea7830cc28877f783619017610dac0f97ce077
- SSDEEP 49152:LlrCnS9mVb0Xq0oSj/6ln2/6wzqZpVj93DxmYGEsI0KDBnp:L4SwVb06ajw2SweZpVj9TxmpuJp
- TLSH T169C53387ABD1FAE5E82885F46E8848C04643DF5C842046F4FD9CBBB7EB418578A5C7D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.