General
- Target matcha.rar
- Size 12.0MB
- Sample260709-thv2hady6x
- SHA256 6e85c5dee53761d3ff45f57ab4b87425137c0f764d3653f5a2e91c7abb01a5ac
- MD5 4b46b5c432e189828de712e93ce65019
- SHA1 35257fcb1b177d7e818b784774218b35bf400c73
- SHA512 87f0d4024743267a263941d7a3a6886a75bddd51acea6e6fdb14d5d29659fa1b3757a1dcd60dec00e114b33c29cf280effffac0a1069c679cce9bf963f898ee5
- SSDEEP 196608:ovjxEylTiuk+TmyLlexF8CnxwzYItvW97+AyIsPlY2OyLF1IbVy+Yon4+U1jKkCr:mlEMiukGL8xlnGzN54i/9Y0F1IR+vx1c
- TLSH T1EFC6330A1DEB305B6AAD7E127BA3098E2E927054FF767147122D21D71244AFDCC1CA7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
matcha/loader.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
matcha/loader.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target matcha/loader.exe
- Size 14.2MB
- SHA256 3ad44d0b739b43078efc8a7f794e58a4a27a54cb59b2bdd825fb831e9b40940b
- MD5 2c8bd22c986588212276324a75eedfa4
- SHA1 7c82ec48b98585e82c6ab0fbac0620de9ded5465
- SHA512 71e934f87122fed2dba93c217721c0de33ba0abcc412764b9db4cf49226d52bfa3c48b81fb5334ae867405cd17e2711cc872cc5a3fbb494872d68d66d5c2b241
- SSDEEP 393216:DkrteQPxAa2hPZ354oMDkQ5YYK3K4zOIOp:Dkn6P154PbYfa0OI8
- TLSH T1A2E6128569D0D6BCC8848238F24516F9F4C93C8D8DF9952ABFC758217A31D98C8B67B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.