General
- Target aaafd170add674008c11e14fb973d590193d367592d9da5a0c197dc25acbf3cd
- Size 151KB
- Sample260709-heygnsdv8r
- SHA256 aaafd170add674008c11e14fb973d590193d367592d9da5a0c197dc25acbf3cd
- MD5 beda5f9ca9aa633a15283754a4e37358
- SHA1 f461962d7e82da6d6a558a43f400b2dd774abc34
- SHA512 3abd06265ed83c59f90797a7ca89636e5769284382410863059c8274a4811fb287ffc2b9afc7fa5f946495359e184f538c6b30affcb9dbb246f148e27c93c947
- SSDEEP 3072:UE3J8RW5t5oH9mAwFXSWjXVrV81y2B+flkL7OjUuxGftPyhdY55s2ZUuyNFhyzz+:NtyH9mAABVcxB+/
- TLSH T1D5E3C314B7F80169F0B36B30A9359B519AB8BC23DE21DB6F1A840A6D1E319C1D631F77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aaafd170add674008c11e14fb973d590193d367592d9da5a0c197dc25acbf3cd.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
aaafd170add674008c11e14fb973d590193d367592d9da5a0c197dc25acbf3cd.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target aaafd170add674008c11e14fb973d590193d367592d9da5a0c197dc25acbf3cd
- Size 151KB
- SHA256 aaafd170add674008c11e14fb973d590193d367592d9da5a0c197dc25acbf3cd
- MD5 beda5f9ca9aa633a15283754a4e37358
- SHA1 f461962d7e82da6d6a558a43f400b2dd774abc34
- SHA512 3abd06265ed83c59f90797a7ca89636e5769284382410863059c8274a4811fb287ffc2b9afc7fa5f946495359e184f538c6b30affcb9dbb246f148e27c93c947
- SSDEEP 3072:UE3J8RW5t5oH9mAwFXSWjXVrV81y2B+flkL7OjUuxGftPyhdY55s2ZUuyNFhyzz+:NtyH9mAABVcxB+/
- TLSH T1D5E3C314B7F80169F0B36B30A9359B519AB8BC23DE21DB6F1A840A6D1E319C1D631F77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.