General
- Target 44b2c30b0a3b1e9b20aeb4f4dfb56986e3014bdc57730909f9d8c5a4a628fd1c
- Size 2.0MB
- Sample260709-jcwezaez2t
- SHA256 44b2c30b0a3b1e9b20aeb4f4dfb56986e3014bdc57730909f9d8c5a4a628fd1c
- MD5 2ebca1c1d99b486e5577b6f0190115d3
- SHA1 e3c213f3e02d3b24c2b41eb0b596fb17a417f382
- SHA512 38400ac304ee41d2f6af5f06c4b99c54811e06be739da14ca5cbc93f18cad8a9bbca03c4327198e4aed197dd5a7c354afea34789a1eb9724a76d0c112b069dd5
- SSDEEP 49152:JSHpdPX6izXvJC0kYTNxkaRBgaLSoTEgy0S4D:Jk3PXTXJkYwazgauT/4D
- TLSH T13EA500A27305C7C8E59216B899EEFF18D4242DF44AE1CA1AF1943DDA9932393EF0D354
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
44b2c30b0a3b1e9b20aeb4f4dfb56986e3014bdc57730909f9d8c5a4a628fd1c.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
44b2c30b0a3b1e9b20aeb4f4dfb56986e3014bdc57730909f9d8c5a4a628fd1c.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 44b2c30b0a3b1e9b20aeb4f4dfb56986e3014bdc57730909f9d8c5a4a628fd1c
- Size 2.0MB
- SHA256 44b2c30b0a3b1e9b20aeb4f4dfb56986e3014bdc57730909f9d8c5a4a628fd1c
- MD5 2ebca1c1d99b486e5577b6f0190115d3
- SHA1 e3c213f3e02d3b24c2b41eb0b596fb17a417f382
- SHA512 38400ac304ee41d2f6af5f06c4b99c54811e06be739da14ca5cbc93f18cad8a9bbca03c4327198e4aed197dd5a7c354afea34789a1eb9724a76d0c112b069dd5
- SSDEEP 49152:JSHpdPX6izXvJC0kYTNxkaRBgaLSoTEgy0S4D:Jk3PXTXJkYwazgauT/4D
- TLSH T13EA500A27305C7C8E59216B899EEFF18D4242DF44AE1CA1AF1943DDA9932393EF0D354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.