General
- Target J7ivqpYDpbu7jEAqSj.exe
- Size 29.1MB
- Sample260709-trg61ad19v
- SHA256 e10374cb7a26238ef15fcde7f80444071424de3be87e84c1c9a3521b11aead72
- MD5 119c3a3c6f36cd1a0f775953dc76ef46
- SHA1 79c047e4cf67e00feaafb8f4f95fc241bcfe1e6f
- SHA512 53d6cee1b275d3f569f15e5559cf05d34a51e21682eac79205605399735d4aee375b50b517de456b0a1f9909dab6d283c62d848b3f1375c9eadba43a4c9111b3
- SSDEEP 786432:JNKU7uoo3aXGKHYdmYRueGjW0JFSfhvD5wvP7UA71rQ:JNxUq0mwYW0JFAhvST7G
- TLSH T1F167339E2ACF40E9D9C108B49B1F7AE723F3A6E60DC54C352EC574857196FB6303A984
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
J7ivqpYDpbu7jEAqSj.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
J7ivqpYDpbu7jEAqSj.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target J7ivqpYDpbu7jEAqSj.exe
- Size 29.1MB
- SHA256 e10374cb7a26238ef15fcde7f80444071424de3be87e84c1c9a3521b11aead72
- MD5 119c3a3c6f36cd1a0f775953dc76ef46
- SHA1 79c047e4cf67e00feaafb8f4f95fc241bcfe1e6f
- SHA512 53d6cee1b275d3f569f15e5559cf05d34a51e21682eac79205605399735d4aee375b50b517de456b0a1f9909dab6d283c62d848b3f1375c9eadba43a4c9111b3
- SSDEEP 786432:JNKU7uoo3aXGKHYdmYRueGjW0JFSfhvD5wvP7UA71rQ:JNxUq0mwYW0JFAhvST7G
- TLSH T1F167339E2ACF40E9D9C108B49B1F7AE723F3A6E60DC54C352EC574857196FB6303A984
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger