General
- Target PEDWSTVE332002C1 - 001 3.dwg
- Size 253KB
- Sample260710-we22ragv7z
- SHA256 92a807632ddb470680a65d15d9566fe0daf8015c9181be5aa3070f78284d612f
- MD5 fae1b007c027e830c10728a00999e9b0
- SHA1 8f90fcca6d5cd34f69e73ce22e6b2aafaaa5bc97
- SHA512 c28271e75ae872c7970f2f2d6c8de90b1a876ae57f4cb9e4f0f517471cd45883534be0ace6dcf22c48a123e94563eef6bbe81c127e46e905408100bb9ecc052d
- SSDEEP 3072:lTTbLcUEE5lHebBfTiUmAqIi68loZAiqg2UNkl3HgmsyJWhpZCUG44vzp9uX:l7Lv7uUI6lCHLklVsaWhp5G44vzK
- TLSH T1FA4412A3D7A3442CF6D261F14B161AD3CCFAF1412A3509D8639D3A0E8729391E942FF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
PEDWSTVE332002C1 - 001 3.dwg
Resource
win11ltsc2024-20260709-en
26 signatures
900 seconds
Malware Config
Targets
-
- Target PEDWSTVE332002C1 - 001 3.dwg
- Size 253KB
- SHA256 92a807632ddb470680a65d15d9566fe0daf8015c9181be5aa3070f78284d612f
- MD5 fae1b007c027e830c10728a00999e9b0
- SHA1 8f90fcca6d5cd34f69e73ce22e6b2aafaaa5bc97
- SHA512 c28271e75ae872c7970f2f2d6c8de90b1a876ae57f4cb9e4f0f517471cd45883534be0ace6dcf22c48a123e94563eef6bbe81c127e46e905408100bb9ecc052d
- SSDEEP 3072:lTTbLcUEE5lHebBfTiUmAqIi68loZAiqg2UNkl3HgmsyJWhpZCUG44vzp9uX:l7Lv7uUI6lCHLklVsaWhp5G44vzK
- TLSH T1FA4412A3D7A3442CF6D261F14B161AD3CCFAF1412A3509D8639D3A0E8729391E942FF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.