General
- Target DownloadedMessage (76).zip
- Size 27KB
- Sample260709-s5taracy5r
- SHA256 c593c24bdf8cf2a3b4e275dfed21321bec43aea9b51247977e023dd48d952409
- MD5 1e14c565308be37327f48a9bdcd7030a
- SHA1 c99c454454f5f45aae8a7303f24ad57a1c884692
- SHA512 65ac32020572497952e25b80b9642512f9641d95b9d9fb36e3eeb9a6769ad420df58e5acf9d2c9f57a756b71a2a4edf73bffa9da86492922d09acc5e046e1251
- SSDEEP 768:yCr1tFHDx5gWVSHOq8Em12n1wyUx2qGdly:yAjw4SHbqcCHMS
- TLSH T1D5D20214E79320D5398E076C7C29D216D8E71FA2B62142D4AF625521F614EFF1232FBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
NFSe-DPS420540720127729800014400001000000000036533.xml
Resource
win10v2004-20260513-en
5 signatures
600 seconds
Behavioral task
behavioral2
Sample
NFSe-DPS420540720127729800014400001000000000036533.xml
Resource
win11ltsc2024-20260706-en
14 signatures
600 seconds
Malware Config
Targets
-
- Target NFSe-DPS420540720127729800014400001000000000036533.xml
- Size 10KB
- SHA256 4228f52a959a3f7441c64a4b5b656921eeb1d3fa2fdd5a6563ad1959b016d544
- MD5 36760ef053a21ba4f64117b6421c0e1c
- SHA1 9dc77db7a55a9e41aaaeb9086d55fae2c0f798e8
- SHA512 62487e9d548ac379c0465ee8a6bde607c2918764defb006965c6d7f6e9e8059ab1275debcfa91be3176487dad8c5658b58b5f5cdad6feced9f254712738d726c
- SSDEEP 192:CeM5IIuyvneJpT6lzr9j74vxiCdDgGL3oG4y56UAjoN23ZlHpkyrwwRbv8xdXjA:ryUTzxpdoG356UAjoyptrFRoxRA
- TLSH T1C7327ECED6C410A69214EF708FABFE450C81B683C9E69C5A27D23E8954DDB449C4EB87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.