General
- Target Belatstrap.exe
- Size 29.7MB
- Sample260714-rt9ypaew7p
- SHA256 3f8f4a2decebd04679a52d9609f6c06de972794ad0230929d3ca56e80884aac4
- MD5 8240363c1f5c9632eaf9241c8a966b61
- SHA1 dfc723e3411673cf29ec0753331b1fd9dff54e32
- SHA512 a90bfa4acb05594cb82f9bfbaf39e00809b9201b11c80234a94d4424bf51cb1b41e60f8dcf546695ce442af71b94f897c8577477d6658a91b1252b959a9afcb7
- SSDEEP 786432:6/8Z1kB1kbKQhuS/VV8+ox+GuCcWBRR9g:o8ZWmhuSCzbcWBR/
- TLSH T14067235666E6E3C8CBC21D44264952DB22C1A8FE84FDA5293FCB6C03A434DEB458DD73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Belatstrap.exe
Resource
win10v2004-20260513-en
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
Belatstrap.exe
Resource
win10ltsc2021-20260513-en
1 signatures
900 seconds
Behavioral task
behavioral3
Sample
Belatstrap.exe
Resource
win11-20260513-en
1 signatures
900 seconds
Behavioral task
behavioral4
Sample
Belatstrap.exe
Resource
win11ltsc2024-20260709-en
15 signatures
900 seconds
Malware Config
Targets
-
- Target Belatstrap.exe
- Size 29.7MB
- SHA256 3f8f4a2decebd04679a52d9609f6c06de972794ad0230929d3ca56e80884aac4
- MD5 8240363c1f5c9632eaf9241c8a966b61
- SHA1 dfc723e3411673cf29ec0753331b1fd9dff54e32
- SHA512 a90bfa4acb05594cb82f9bfbaf39e00809b9201b11c80234a94d4424bf51cb1b41e60f8dcf546695ce442af71b94f897c8577477d6658a91b1252b959a9afcb7
- SSDEEP 786432:6/8Z1kB1kbKQhuS/VV8+ox+GuCcWBRR9g:o8ZWmhuSCzbcWBR/
- TLSH T14067235666E6E3C8CBC21D44264952DB22C1A8FE84FDA5293FCB6C03A434DEB458DD73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger