General
- Target DivXPro505GAINBundle.exe
- Size 3.7MB
- Sample260730-g9hh9sscmb
- SHA256 a0fae0045cbe18112685952e0109590baa743d0c8228661611f52bd437357f39
- MD5 ed1c1e3f1bc516d7ad3be29cb3df8164
- SHA1 a63384ddb08caf70786b5b55cf52ba85f4ed4824
- SHA512 1e83e7c15667339993df827fb0fa0807c125e9803549277ab92adeb9ff4ef1a01ed1700ed9c4893297977abc006d7d936c2a9ddc09058d6975032615b5f0e350
- SSDEEP 98304:/HysAceTgGkDh8kIOkOEdaqlNFmGP3NolDjXOwEsC:PysAcOs1IObEdDhP3u
- TLSH T1F506336EF7A263F2C10950323FAACE14EB2BCD5607A592CB7585730D6A31F53827644E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DivXPro505GAINBundle.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DivXPro505GAINBundle.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target DivXPro505GAINBundle.exe
- Size 3.7MB
- SHA256 a0fae0045cbe18112685952e0109590baa743d0c8228661611f52bd437357f39
- MD5 ed1c1e3f1bc516d7ad3be29cb3df8164
- SHA1 a63384ddb08caf70786b5b55cf52ba85f4ed4824
- SHA512 1e83e7c15667339993df827fb0fa0807c125e9803549277ab92adeb9ff4ef1a01ed1700ed9c4893297977abc006d7d936c2a9ddc09058d6975032615b5f0e350
- SSDEEP 98304:/HysAceTgGkDh8kIOkOEdaqlNFmGP3NolDjXOwEsC:PysAcOs1IObEdDhP3u
- TLSH T1F506336EF7A263F2C10950323FAACE14EB2BCD5607A592CB7585730D6A31F53827644E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory