General
- Target PyWareFishingV4.exe
- Size 72.4MB
- Sample260713-srkfpabs7m
- SHA256 ea936317e577a46aa7af0c68ea79947a76e60db911b250c5953590091fe1b85a
- MD5 e2872f4a7be374bba527c98ad9455baa
- SHA1 30ebe94c6d27d594ccb565464b9ca06b1689b608
- SHA512 0aed53288c8f5144500e80fa3206ffe14f7ea15caa0596ce55b2009afbe7e6c5feaf577aebb95f64fab146e09094bf93a400b4ed2852f2a1bdb6f91d01cbe35c
- SSDEEP 1572864:sYxh2WFLN3P3R8fNknAnZ2yOogqTcaNH21A/ihw1rrx824tlgQPxietas:sYxU2/h8fNknAnIdA7lxD9r/2yQP7
- TLSH T140F733CEBF012642E3CB4737B5C1892ADEB0FA8D171204679F752D6226172D96DFA630
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
PyWareFishingV4.exe
Resource
win10v2004-20260513-en
4 signatures
600 seconds
Behavioral task
behavioral2
Sample
PyWareFishingV4.exe
Resource
win11ltsc2024-20260709-en
15 signatures
600 seconds
Malware Config
Targets
-
- Target PyWareFishingV4.exe
- Size 72.4MB
- SHA256 ea936317e577a46aa7af0c68ea79947a76e60db911b250c5953590091fe1b85a
- MD5 e2872f4a7be374bba527c98ad9455baa
- SHA1 30ebe94c6d27d594ccb565464b9ca06b1689b608
- SHA512 0aed53288c8f5144500e80fa3206ffe14f7ea15caa0596ce55b2009afbe7e6c5feaf577aebb95f64fab146e09094bf93a400b4ed2852f2a1bdb6f91d01cbe35c
- SSDEEP 1572864:sYxh2WFLN3P3R8fNknAnZ2yOogqTcaNH21A/ihw1rrx824tlgQPxietas:sYxU2/h8fNknAnIdA7lxD9r/2yQP7
- TLSH T140F733CEBF012642E3CB4737B5C1892ADEB0FA8D171204679F752D6226172D96DFA630
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.