General
- Target AntiBlockrozcomnadzor.exe
- Size 66.8MB
- Sample260709-nw17saav9w
- SHA256 6d0c09216ab30fc9c60e4c05fa504462dd423a0f08fce34531192e52ca51d18a
- MD5 fa48a171ed8e8d20b845ccb85a1a865b
- SHA1 9babd78df61dece3c25d0584ba51be81d33bf0a0
- SHA512 2234bc00df0a20cee36be01c9ebd4399c83cc946f39c7520a172dcb53f233277c81c1591ca9946234b21a95a166249355cf9bfd4c1d6044ff474f3026e9a2d6d
- SSDEEP 1572864:9vUMOtYA+dy2J0f0/rBdsG7bpip0WWiCK4cNXMG4dw:BUXmAI5BB7tE0WV4caJ
- TLSH T141E733118C16A66EF3065736D0D3E85B7FE3164B8B66C0A817C8CA0B5FA7189DD3DC26
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
AntiBlockrozcomnadzor.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
AntiBlockrozcomnadzor.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target AntiBlockrozcomnadzor.exe
- Size 66.8MB
- SHA256 6d0c09216ab30fc9c60e4c05fa504462dd423a0f08fce34531192e52ca51d18a
- MD5 fa48a171ed8e8d20b845ccb85a1a865b
- SHA1 9babd78df61dece3c25d0584ba51be81d33bf0a0
- SHA512 2234bc00df0a20cee36be01c9ebd4399c83cc946f39c7520a172dcb53f233277c81c1591ca9946234b21a95a166249355cf9bfd4c1d6044ff474f3026e9a2d6d
- SSDEEP 1572864:9vUMOtYA+dy2J0f0/rBdsG7bpip0WWiCK4cNXMG4dw:BUXmAI5BB7tE0WV4caJ
- TLSH T141E733118C16A66EF3065736D0D3E85B7FE3164B8B66C0A817C8CA0B5FA7189DD3DC26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Loads dropped DLL
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.