General
- Target StringEditorPrivatge.exe
- Size 477KB
- Sample260709-j3pp4sfw6s
- SHA256 ee282473153f43c053802c983cf4884ab03c7d02de6bff1ae68ce2e97c759115
- MD5 9bd44e0552f658c34e2cb216589f500d
- SHA1 88fdf63f7080c590c4ebac6cc8268c8c62be7919
- SHA512 381b0296d316085a3e0ce75badd98b5f474548027f09480b2519f12e1c530301cbc9b59eab0c141b3ad4412076bbfeab163c5578107f388e4fa1ba8fc2238022
- SSDEEP 6144:gHEk0cmYO8RxcwiOG1JD/fXVFxvxkepThUioV0a2Aw5LpNfC8JzcPETdkPNxmUVz:gHZuYOsPiOs/dfvmeFJ7cS4TH
- TLSH T1CEA43A406A80D5C8F7358BBA04E1C98DC36B7C3D89D385C55AF5A9AD06762BF183392F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
StringEditorPrivatge.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
StringEditorPrivatge.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target StringEditorPrivatge.exe
- Size 477KB
- SHA256 ee282473153f43c053802c983cf4884ab03c7d02de6bff1ae68ce2e97c759115
- MD5 9bd44e0552f658c34e2cb216589f500d
- SHA1 88fdf63f7080c590c4ebac6cc8268c8c62be7919
- SHA512 381b0296d316085a3e0ce75badd98b5f474548027f09480b2519f12e1c530301cbc9b59eab0c141b3ad4412076bbfeab163c5578107f388e4fa1ba8fc2238022
- SSDEEP 6144:gHEk0cmYO8RxcwiOG1JD/fXVFxvxkepThUioV0a2Aw5LpNfC8JzcPETdkPNxmUVz:gHZuYOsPiOs/dfvmeFJ7cS4TH
- TLSH T1CEA43A406A80D5C8F7358BBA04E1C98DC36B7C3D89D385C55AF5A9AD06762BF183392F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.