General
- Target 260307-bmewzaaw2t_pw_infected.zip
- Size 44.5MB
- Sample260715-tx63bagv8j
- SHA256 2143b5ede79ad3a844be75129a6c648d6b8e88e8d1f9f4f3a1379ee65caa36ad
- MD5 7321b5320da9c875f6a0827250cb4106
- SHA1 5c90c49804cdc0dfde46be0e992b56e3868a4b46
- SHA512 fbb321f0c73a1388f88f8023bfd9766518f8bbdf44df92b843e9b0319c2c5dff6cddc1bac0de75bff06aa778cb4d2c1813318c5741c54061da315537cebcbeff
- SSDEEP 786432:KhMMEiO7zSvK/QggaZDiPXgWA6yp+Vf7S3bCfdQYBO13uaiMpkLNJ8v3o2Afj0uY:MMjt6K/Qggadi08dGWfyYi3/i3Lj8vfZ
- TLSH T165A7331D8F3B03F27707E3F660296943886EBDB5E81E4D0D1BD85A8042CB7D65638AB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
AioBypass (1).exe
Resource
win11ltsc2024-20260709-en
17 signatures
900 seconds
Malware Config
Targets
-
- Target AioBypass (1).exe
- Size 44.8MB
- SHA256 042a9accf93c7d5eeb64ef3aed3075dc2336cfe9807ade894fe6f7db516cb7aa
- MD5 66592d9d2f189ec3a4f8eadd00b32296
- SHA1 a91bb797d1b755a46289f1c35cad2990eadd74e9
- SHA512 128d0336bc51531154d072f791b4559b5259a4a61efdf019134c9e25ea4916c6675ff498f370569ed0b6559db195abef165e349d073daf060f1fabae2fb7d488
- SSDEEP 786432:TfpmexFNdu1b64UblJ1gESxaSZUR93gO8UggFesyFLoiEX1MB1p7C:TfweXu1BgJ1IZA3gO8UgQT+U31s2
- TLSH T10CA73365316040DDECE7BA3B17B79841D3B7B4227349CD9B23A087C96D837B41A3C99A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.