General
- Target main.py
- Size 38KB
- Sample260718-l35sfaaz9w
- SHA256 8c1ff5ea0ab81a687a9fc9c72aae5b86b4547fbd53a3fe09b1312e5ca3864e0d
- MD5 b3c92745af0249f19f96ebd97852bf55
- SHA1 be607edf3e3daf41bb613e2a89ceecdb378336e7
- SHA512 ce2aa25e35a32d47a6a5c232ef6eb4e1e596dc8442fb250190e9f8df399f5cce1f5a97cd83221cf1a84dc7354a0795489b5d3aa9ca917df725acdb3d5c9fb76f
- SSDEEP 768:rJLMXYKqsWh/Euz78+xsbk2SI0pSOwGTOESn:rJLMXYKqPE87Kko3RZ
- TLSH T1C2035511CC5F8C9F8173C04FB9027555EB2A47BB2A22B677B7ACAAB86F74064817074D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
main.py
Resource
win11-20260513-en
24 signatures
150 seconds
Malware Config
Targets
-
- Target main.py
- Size 38KB
- SHA256 8c1ff5ea0ab81a687a9fc9c72aae5b86b4547fbd53a3fe09b1312e5ca3864e0d
- MD5 b3c92745af0249f19f96ebd97852bf55
- SHA1 be607edf3e3daf41bb613e2a89ceecdb378336e7
- SHA512 ce2aa25e35a32d47a6a5c232ef6eb4e1e596dc8442fb250190e9f8df399f5cce1f5a97cd83221cf1a84dc7354a0795489b5d3aa9ca917df725acdb3d5c9fb76f
- SSDEEP 768:rJLMXYKqsWh/Euz78+xsbk2SI0pSOwGTOESn:rJLMXYKqPE87Kko3RZ
- TLSH T1C2035511CC5F8C9F8173C04FB9027555EB2A47BB2A22B677B7ACAAB86F74064817074D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.