General
- Target RCH.exe
- Size 10.4MB
- Sample260715-a66clabs7t
- SHA256 50c2d9182efdf6783cf7b9072b24f2ec3e18280e14503e1cbfa9438f3b9d2317
- MD5 f177d220d72d9d1c528291dd39a4ba72
- SHA1 b9545e2038a5ceab80465efdc2263cf231fdb232
- SHA512 4a42030ea25f3bbdddbe258dd8ed859f7091893bbd4541aadc3334c85da7cad210bc907d6d76549882f2556f5bccb3fb766ac2d0ba67b0d2a935cb12005df509
- SSDEEP 196608:bSxm+0W8/LaC/QeA1HeT39IigwTauDXURuA3dSYEQVdlGR:vZW8z41+TtIiF2uARuA3dS9QVrG
- TLSH T1D4B633C6F79604E8E8AD863A92D5455667933C7E87A882CF17E438411E331E2DF36F42
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
RCH.exe
Resource
win10v2004-20260513-en
2 signatures
600 seconds
Behavioral task
behavioral2
Sample
RCH.exe
Resource
win11ltsc2024-20260709-en
15 signatures
600 seconds
Behavioral task
behavioral3
Sample
condo_hub.pyc
Resource
win10v2004-20260513-en
3 signatures
600 seconds
Behavioral task
behavioral4
Sample
condo_hub.pyc
Resource
win11ltsc2024-20260709-en
3 signatures
600 seconds
Malware Config
Targets
-
- Target RCH.exe
- Size 10.4MB
- SHA256 50c2d9182efdf6783cf7b9072b24f2ec3e18280e14503e1cbfa9438f3b9d2317
- MD5 f177d220d72d9d1c528291dd39a4ba72
- SHA1 b9545e2038a5ceab80465efdc2263cf231fdb232
- SHA512 4a42030ea25f3bbdddbe258dd8ed859f7091893bbd4541aadc3334c85da7cad210bc907d6d76549882f2556f5bccb3fb766ac2d0ba67b0d2a935cb12005df509
- SSDEEP 196608:bSxm+0W8/LaC/QeA1HeT39IigwTauDXURuA3dSYEQVdlGR:vZW8z41+TtIiF2uARuA3dS9QVrG
- TLSH T1D4B633C6F79604E8E8AD863A92D5455667933C7E87A882CF17E438411E331E2DF36F42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target condo_hub.pyc
- Size 11KB
- SHA256 a69c695a1f47763bcad1ef38142ae089203479794c667df90a4bfcc0daee360e
- MD5 7b5adc3a91a39f4a738f0968ddd1432a
- SHA1 71a014b53e381297ef7a666bbc69d6ad2c7e48f9
- SHA512 5079181522599da3b860438e79d5f1f3c0171b4123dbd57c583ef0d26ff5b473f8bff151002f4b6bfdb99de0a460129fe6debce5a84559dfa2b28cbc5d5e92f1
- SSDEEP 192:azO2PJyJjVMyQPdPVJKoeoM/r1PK0Nkn/YSSS4RWD:7bxiT9VmR/r1PnNa/iRWD
- TLSH T1D632C7C4A7D2D97BFC68B2B58467230B7324D5F0F2449B1722A6C1BEAC82B906D165CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10