General
- Target Obsidian Ebook Reader.exe
- Size 143.2MB
- Sample260709-svp6cacy3l
- SHA256 bca15ba8d16962845422925d397e8b29e2183d118d5c0998a2dc40e70c025bc8
- MD5 dea78585cb36f93e06124875b1937060
- SHA1 ca48346227217d9accdcb8a70487389292c54ece
- SHA512 1627c36a7c553153ad7d51e7148e27fad8b4ce5e69fba51c8ca4e1c8913f6cc806b64dcd28e7d8cbdbc416602025bfeb2720f33a5b72ba609f7b94e274f4e1f8
- SSDEEP 3145728:Jpb0Fq+MW2Mdiygmpb8i+rMHCPeyNWULp+mx3xVtEbeFD:70FL0g3pyb/Q7mhq8
- TLSH T1B9683331368AC13FE56A4471663DDBAF51297FB60B7240CBA3D85A6E15F58C21332E23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Obsidian Ebook Reader.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
Obsidian Ebook Reader.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Obsidian Ebook Reader.exe
- Size 143.2MB
- SHA256 bca15ba8d16962845422925d397e8b29e2183d118d5c0998a2dc40e70c025bc8
- MD5 dea78585cb36f93e06124875b1937060
- SHA1 ca48346227217d9accdcb8a70487389292c54ece
- SHA512 1627c36a7c553153ad7d51e7148e27fad8b4ce5e69fba51c8ca4e1c8913f6cc806b64dcd28e7d8cbdbc416602025bfeb2720f33a5b72ba609f7b94e274f4e1f8
- SSDEEP 3145728:Jpb0Fq+MW2Mdiygmpb8i+rMHCPeyNWULp+mx3xVtEbeFD:70FL0g3pyb/Q7mhq8
- TLSH T1B9683331368AC13FE56A4471663DDBAF51297FB60B7240CBA3D85A6E15F58C21332E23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.