General
- Target Update.exe
- Size 1.5MB
- Sample260710-srycjses91
- SHA256 18963538d5ff50b4c78e30b702b4cc4345978ec5d7dced4ac0512b93204061af
- MD5 d389bb0b8bb89e2d80bc1be720fa9fda
- SHA1 613b062ea68cc53031e3f3232abbb59fd5662d2e
- SHA512 1e1a12f78d45cc0fcdfde0791c50db656674b49bdc1da7ab3f664454def4b4d63babaa3714db0540f26cc45e0615fb97d6bf407dd02e41d0f3c9e5ee3812c9e4
- SSDEEP 24576:+BJkrlr7AiOlwOpJeYOdTNK9RgIM/aR9Gl7MRH/:+BJkAlwO/X9Glmf
- TLSH T141753911B7E88A2BE4AE57BAB071016547F3E5866376F78F6A4CA1781FD37804C02367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
Update.exe
Resource
win11ltsc2024-20260709-en
21 signatures
900 seconds
Malware Config
Targets
-
- Target Update.exe
- Size 1.5MB
- SHA256 18963538d5ff50b4c78e30b702b4cc4345978ec5d7dced4ac0512b93204061af
- MD5 d389bb0b8bb89e2d80bc1be720fa9fda
- SHA1 613b062ea68cc53031e3f3232abbb59fd5662d2e
- SHA512 1e1a12f78d45cc0fcdfde0791c50db656674b49bdc1da7ab3f664454def4b4d63babaa3714db0540f26cc45e0615fb97d6bf407dd02e41d0f3c9e5ee3812c9e4
- SSDEEP 24576:+BJkrlr7AiOlwOpJeYOdTNK9RgIM/aR9Gl7MRH/:+BJkAlwO/X9Glmf
- TLSH T141753911B7E88A2BE4AE57BAB071016547F3E5866376F78F6A4CA1781FD37804C02367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.