General
- Target BullitExcelAddin64.msi
- Size 6.4MB
- Sample260727-ppaxpascjd
- SHA256 924137d4a27c0cdd65d689d76f83550061a7d1fadd0cb034014c2e1c1e095bb9
- MD5 475f0a135c4959b293e9e33c3786bb97
- SHA1 9fd14378f2b222c998f0c13e454c0cb988038b4a
- SHA512 a2552f3bdf7d53d2f3bded0c7438bd55a6dbecd3fe21fb7b3594f99eca2e2b0777b14b21bf08491446bfeec08d3e608c927d23da002c7737ea160748ca90e486
- SSDEEP 98304:GxMKINemrgobgeqMe6koIYU3IJSBkRYSqLx1YDiqBUUW1k8QXp2ZEP:GmKuemuPALM3IIBqYSqLx1YD9BPEQXq
- TLSH T1E866BF21B94DC136D66E06B09D3EDB9BA53C6DB20BB048DBA3D4B88A59304C39335F57
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BullitExcelAddin64.msi
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
BullitExcelAddin64.msi
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Extracted
Language
-
xlm4.0
Source
Targets
-
- Target BullitExcelAddin64.msi
- Size 6.4MB
- SHA256 924137d4a27c0cdd65d689d76f83550061a7d1fadd0cb034014c2e1c1e095bb9
- MD5 475f0a135c4959b293e9e33c3786bb97
- SHA1 9fd14378f2b222c998f0c13e454c0cb988038b4a
- SHA512 a2552f3bdf7d53d2f3bded0c7438bd55a6dbecd3fe21fb7b3594f99eca2e2b0777b14b21bf08491446bfeec08d3e608c927d23da002c7737ea160748ca90e486
- SSDEEP 98304:GxMKINemrgobgeqMe6koIYU3IJSBkRYSqLx1YDiqBUUW1k8QXp2ZEP:GmKuemuPALM3IIBqYSqLx1YD9BPEQXq
- TLSH T1E866BF21B94DC136D66E06B09D3EDB9BA53C6DB20BB048DBA3D4B88A59304C39335F57
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.