General
- Target MuMu_6.0.1_QDy6HOC.exe
- Size 5.8MB
- Sample260712-x3fdbshy7v
- SHA256 4e30c1e0a97f730266f5239c34be63d5327774b0085c4d8f865c85d7fdc3816a
- MD5 63d7274e3a2b37c4d873eccb37fd9449
- SHA1 7c6563abde9e6aaa3bf2e8eb3e41cedd1bd1dfad
- SHA512 0cb884684f4428259fb9f634abb951910c68decfdbab5c79b2c689a3d5d2daee998a0218b95a5bad3d7ea76f4166488213af05446a330deae0b66d63657054a4
- SSDEEP 98304:uer6uFFkOuPy3cjtFYEUO9u97ZmKdlhqap1ZcWDtIELv9VCOxeI+S0bIwrSwVNJG:Xr6uFFkOuPT7c7ZHlLbjXLWjI+SvFCjG
- TLSH T1F3562392D601B3B2D41E5DFC512D87B6FE933CDE6D482C46018EF1ABB0AD5602E858DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
MuMu_6.0.1_QDy6HOC.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
MuMu_6.0.1_QDy6HOC.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target MuMu_6.0.1_QDy6HOC.exe
- Size 5.8MB
- SHA256 4e30c1e0a97f730266f5239c34be63d5327774b0085c4d8f865c85d7fdc3816a
- MD5 63d7274e3a2b37c4d873eccb37fd9449
- SHA1 7c6563abde9e6aaa3bf2e8eb3e41cedd1bd1dfad
- SHA512 0cb884684f4428259fb9f634abb951910c68decfdbab5c79b2c689a3d5d2daee998a0218b95a5bad3d7ea76f4166488213af05446a330deae0b66d63657054a4
- SSDEEP 98304:uer6uFFkOuPy3cjtFYEUO9u97ZmKdlhqap1ZcWDtIELv9VCOxeI+S0bIwrSwVNJG:Xr6uFFkOuPT7c7ZHlLbjXLWjI+SvFCjG
- TLSH T1F3562392D601B3B2D41E5DFC512D87B6FE933CDE6D482C46018EF1ABB0AD5602E858DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Downloads MZ/PE file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.