General
- Target ym2fa3.7z
- Size 2.0MB
- Sample260712-ckqq5aby7l
- SHA256 89ebbac5d1b9fc0519f67a7bba1b982164d733136c7d93f333e93606ecba153c
- MD5 bc7ecb5e27f0e1b193a315bd5a155303
- SHA1 365c724c90d64eae9a3e757cab69f1183f2f2227
- SHA512 36a97fa540f5490ded127b8f8506f62fe4c730a397de6b3aeb05b55e7465ebac4ee9e910b10459c5d082c7f57ee0b50323846fb2a2cfc2f02d8def12a4d09644
- SSDEEP 49152:hymAVbKBESK6VdE9RsodfwCz8fcv8+9k/dRa9/KjLpGiTm8Lc:hwKB7K6TEfsiwCzR0+2VRIipTc
- TLSH T171A5332DBD1E6F374CCA04BC314280427945CBEBD614B96769BB83BD08A4AF313AF559
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ym2fa3.7z
Resource
win10v2004-20260513-en
13 signatures
300 seconds
Behavioral task
behavioral2
Sample
ym2fa3.7z
Resource
win11ltsc2024-20260709-en
4 signatures
300 seconds
Malware Config
Targets
-
- Target ym2fa3.7z
- Size 2.0MB
- SHA256 89ebbac5d1b9fc0519f67a7bba1b982164d733136c7d93f333e93606ecba153c
- MD5 bc7ecb5e27f0e1b193a315bd5a155303
- SHA1 365c724c90d64eae9a3e757cab69f1183f2f2227
- SHA512 36a97fa540f5490ded127b8f8506f62fe4c730a397de6b3aeb05b55e7465ebac4ee9e910b10459c5d082c7f57ee0b50323846fb2a2cfc2f02d8def12a4d09644
- SSDEEP 49152:hymAVbKBESK6VdE9RsodfwCz8fcv8+9k/dRa9/KjLpGiTm8Lc:hwKB7K6TEfsiwCzR0+2VRIipTc
- TLSH T171A5332DBD1E6F374CCA04BC314280427945CBEBD614B96769BB83BD08A4AF313AF559
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies boot configuration data using bcdedit
-
Executes dropped EXE
-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.