General
- Target Spotify.exe
- Size 44KB
- Sample260716-p35dfsdx6r
- SHA256 33c1dffcb2d22c5c2800cdaae4a5504a64ad8d3d210bb262063aa852d83a9d5b
- MD5 36c6f53c4c1b3308020b9af19ba21ffb
- SHA1 9595dc5fc9bd539bc555a82a1928b12cc5992019
- SHA512 5041e06489052aa01676be00ff6983acd527356dea054405b831dc54c54494e1fe8423e81ea0a0eeb0b1144fcc215424c57051484cfb30b16a4fa56f5cc775e0
- SSDEEP 768:GHSRWCB3XyfnHyBDhKxQmVlEIaddgs4L342Z8LY3ZJ:GHSRW6SfnH2DoGAEIaddgyOJ
- TLSH T1C923B30BEBA550F0E1F7C27895A32A2DF8B1B4A2573057CF5391914E0BB2BE4A43DB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Spotify.exe
Resource
win11-20260513-en
21 signatures
900 seconds
Behavioral task
behavioral2
Sample
Spotify.exe
Resource
win11ltsc2024-20260710-en
9 signatures
900 seconds
Malware Config
Targets
-
- Target Spotify.exe
- Size 44KB
- SHA256 33c1dffcb2d22c5c2800cdaae4a5504a64ad8d3d210bb262063aa852d83a9d5b
- MD5 36c6f53c4c1b3308020b9af19ba21ffb
- SHA1 9595dc5fc9bd539bc555a82a1928b12cc5992019
- SHA512 5041e06489052aa01676be00ff6983acd527356dea054405b831dc54c54494e1fe8423e81ea0a0eeb0b1144fcc215424c57051484cfb30b16a4fa56f5cc775e0
- SSDEEP 768:GHSRWCB3XyfnHyBDhKxQmVlEIaddgs4L342Z8LY3ZJ:GHSRW6SfnH2DoGAEIaddgyOJ
- TLSH T1C923B30BEBA550F0E1F7C27895A32A2DF8B1B4A2573057CF5391914E0BB2BE4A43DB51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.