General
- Target dap-2.5-win64.exe
- Size 24.6MB
- Sample260709-wlr55afs3l
- SHA256 4266baa3165a9b258c6ef5aa9eb92e646260869fae1d2a848547e4dec15281e9
- MD5 2266b835092adb58a393be4123d73b67
- SHA1 1f597212272a22c6c72d23c53ad9fb31644a8ac1
- SHA512 68451700bcbe48832bfee1a7342805954aec6b6251586bbb13744d07452014d63d46d788f67370d8322cc53a57d044b51873d2082ca87f26dae5ed8591e38cc5
- SSDEEP 393216:dzOqxsCXt1Yp+BjOQ+J6XW68BChdo1mQLgzLNcDfDgrc6JaxiKRMoJQgD2pd:dVyul+gX4BSdhQgJcb0IcaxpRMoCgm
- TLSH T16E473390AD646889DCB7467888A0E7CDE7967C5B93C16297027032532DF7B902D72F8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
dap-2.5-win64.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
dap-2.5-win64.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Behavioral task
behavioral3
Sample
main.pyc
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
main.pyc
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target dap-2.5-win64.exe
- Size 24.6MB
- SHA256 4266baa3165a9b258c6ef5aa9eb92e646260869fae1d2a848547e4dec15281e9
- MD5 2266b835092adb58a393be4123d73b67
- SHA1 1f597212272a22c6c72d23c53ad9fb31644a8ac1
- SHA512 68451700bcbe48832bfee1a7342805954aec6b6251586bbb13744d07452014d63d46d788f67370d8322cc53a57d044b51873d2082ca87f26dae5ed8591e38cc5
- SSDEEP 393216:dzOqxsCXt1Yp+BjOQ+J6XW68BChdo1mQLgzLNcDfDgrc6JaxiKRMoJQgD2pd:dVyul+gX4BSdhQgJcb0IcaxpRMoCgm
- TLSH T16E473390AD646889DCB7467888A0E7CDE7967C5B93C16297027032532DF7B902D72F8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target main.pyc
- Size 3KB
- SHA256 e30140863b9a13c7485e074f985942dc3c76f164f7d3e2421cccec3426027c1b
- MD5 01e93ba10ff1892d0a71f4c27ee6b8af
- SHA1 5ea30f92f32cc298322bd73c8664400dc413e9f4
- SHA512 138d86cd48fb54c02af24c1fd38ed73a50d39e7c604c01c5abe460ba5bb16b02e9c4e10871a2bb5e17ce6786df5057ecce05eefde0fb657dfe20c4eab0802577
- TLSH T11E510758C50C2173FDE37A30E58956B496636360A3A080E7610DB0925D8ABD8E1C736E
- MD5 SHA1 SHA512 TLSH
Score3/10