General
- Target cds.msi
- Size 2.2MB
- Sample260730-28ndcastbv
- SHA256 86f1e8695d3e2acc6fddf1655899b9bd7df5b0245f7dd76b4c23fe44e16af757
- MD5 3b7b4914af002e560bad848b271cf915
- SHA1 a4c882631a995ef57968e0cde5c26e7be1a242d6
- SHA512 c6e208d50e7156877caefecb16c679c83e7b91191921ecab65ea0fb133f2dbc0bf65e77566154def4a65ec9034a60f940f5e84584878799d5c4bd68374131cc0
- SSDEEP 49152:BQPTPd3wpqPq9nM/jzoM7T871UEHzopHeU47fkR9LeFZ:BQPjtw4PknkzLEJTzHb4Lez
- TLSH T1F9B533523B6C21E1EA08467059FA03E4D63CBD88B7CBAD42E755F35C563DCBD62B09A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cds.msi
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
cds.msi
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target cds.msi
- Size 2.2MB
- SHA256 86f1e8695d3e2acc6fddf1655899b9bd7df5b0245f7dd76b4c23fe44e16af757
- MD5 3b7b4914af002e560bad848b271cf915
- SHA1 a4c882631a995ef57968e0cde5c26e7be1a242d6
- SHA512 c6e208d50e7156877caefecb16c679c83e7b91191921ecab65ea0fb133f2dbc0bf65e77566154def4a65ec9034a60f940f5e84584878799d5c4bd68374131cc0
- SSDEEP 49152:BQPTPd3wpqPq9nM/jzoM7T871UEHzopHeU47fkR9LeFZ:BQPjtw4PknkzLEJTzHb4Lez
- TLSH T1F9B533523B6C21E1EA08467059FA03E4D63CBD88B7CBAD42E755F35C563DCBD62B09A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger