Analysis
- user interaction
yes - max time kernel
48s - max time network
24s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/07/2026, 04:35
Behavioral task
behavioral1
Sample
Hard Disk Serial Changer.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Hard Disk Serial Changer.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target Hard Disk Serial Changer.exe
- Size 636KB
- Sample260727-e7zcwshc22
- SHA256 2c141c06f7df57f11ef2c62f2a96093484a65df47065b1a475c53784af0e2664
- MD5 c20e96d4e616ce333c19a1c15a1cc137
- SHA1 f79645ec115130ee59958c55a556f564260b7a9e
- SHA512 519fec9955c4a18e45ec68d9e7dc2bcda74721a6ea088e59e634e26b136bfa15f5efedf8839c036a3cfdcdb9780a2121dc2d71f1fdbbfd3df02d9969e5db753b
- SSDEEP 12288:EN1TNRzUSWgDxPWnP0Lamg+hyMU1EUFT99qpDDcZDDR5Id1888888888888W888H:whNRASWgDxPWnP0LamWYC8EOd
- TLSH T188D47D12B3D14437D177563D9C7B92A8AC26BD212EE4984A2EF4FE4C1F787813939263
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\U: Hard Disk Serial Changer.exe File opened (read-only) \??\W: Hard Disk Serial Changer.exe File opened (read-only) \??\Y: Hard Disk Serial Changer.exe File opened (read-only) \??\Z: Hard Disk Serial Changer.exe File opened (read-only) \??\A: Hard Disk Serial Changer.exe File opened (read-only) \??\H: Hard Disk Serial Changer.exe File opened (read-only) \??\J: Hard Disk Serial Changer.exe File opened (read-only) \??\K: Hard Disk Serial Changer.exe File opened (read-only) \??\Q: Hard Disk Serial Changer.exe File opened (read-only) \??\T: Hard Disk Serial Changer.exe File opened (read-only) \??\V: Hard Disk Serial Changer.exe File opened (read-only) \??\D: Hard Disk Serial Changer.exe File opened (read-only) \??\P: Hard Disk Serial Changer.exe File opened (read-only) \??\S: Hard Disk Serial Changer.exe File opened (read-only) \??\B: Hard Disk Serial Changer.exe File opened (read-only) \??\G: Hard Disk Serial Changer.exe File opened (read-only) \??\I: Hard Disk Serial Changer.exe File opened (read-only) \??\N: Hard Disk Serial Changer.exe File opened (read-only) \??\O: Hard Disk Serial Changer.exe File opened (read-only) \??\R: Hard Disk Serial Changer.exe File opened (read-only) \??\X: Hard Disk Serial Changer.exe File opened (read-only) \??\L: Hard Disk Serial Changer.exe File opened (read-only) \??\M: Hard Disk Serial Changer.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Hard Disk Serial Changer.exe