General
- Target f196e5b23195986117051abb02e6b36a5f0964751e5b969990a9b6881724eb76.zip
- Size 485KB
- Sample260709-v8797afw51
- SHA256 75bcc665cb26569ca9afda8b111d4dd57d21f866a596249e9c7b61c7549a56d9
- MD5 75087ec41f3ca0fe570553e7c26b0e65
- SHA1 8fed85da6178cb55fd7184d119a8deacfde81a75
- SHA512 16c868a6bb81ea5a4d16fb8a84ba54dffc3ab97357174ee82d6fc102d35f4c49c209912b4a1a3965c83f4e5366588ee3c918ba88fe935f33a9add3ccad16e2fd
- SSDEEP 12288:BtA1ooJUdGJe8/lVXumcian2s1OfCrwZdFVd:ohJMGJZ/212sjIdd
- TLSH T1D9B423ED6AA71BDE6880A13B53140A50F2BC28E46656C13BE90BFF5FD30395C175D05E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
f196e5b23195986117051abb02e6b36a5f0964751e5b969990a9b6881724eb76.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
f196e5b23195986117051abb02e6b36a5f0964751e5b969990a9b6881724eb76.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target f196e5b23195986117051abb02e6b36a5f0964751e5b969990a9b6881724eb76
- Size 794KB
- SHA256 f196e5b23195986117051abb02e6b36a5f0964751e5b969990a9b6881724eb76
- MD5 a9d513736725829aabd6b655f0092aa4
- SHA1 2a3efe520f692791799139252234b7989c8495dc
- SHA512 cd7ae6a643c6294ee037099aa8a1c48d4adcf06c33681a62e0f7e0a0314414b272dc5743a6ff5a6924b180d21493bde4b2ad7ad34901b859cb097e209549f061
- SSDEEP 12288:YnrePWUGbJzhv+goKITpz/bSePLQiEBltsVy6Wy4S3:YrCWUGb+gITpj2E7s0VyxyJ
- TLSH T1A705AEE5795E76BBC00A1CBA8E568E6274EC57B187504C93FFD53EBA4910CC31623932
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.