General
- Target Y8LIh1O5otkaA8FogfS9CT_qshb.exe
- Size 22.0MB
- Sample260730-hd4bjasene
- SHA256 11918d9589fbe67485c0c208372c1767c4abe82c6d94122bf239c1579651d3ee
- MD5 626bc5c22c662b5d5b982d6a0312101d
- SHA1 aaf0cf789fc2a5f957861ed85865add83510a1a0
- SHA512 2dd33ce2bc37c6b4438c8b1955378943bab1edfe9845ba55fee7266dbd4bfd6e44e64f13dfe256f62c7ce020bccdbdf1679cb67d6e856f4dfb398bb54c23f656
- SSDEEP 393216:BilhpFAl5nezJIdPAsKiuZqi+odepneorCTMD+R0/qflLg2LX0DGnKJeekA:BeclczJISszmaodelBrOLgu0qnKJeek
- TLSH T1CE3733D43AD0D26DC09AC435C28787F5F0936FD89EBA941BBFC609122570B96CCB2979
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Y8LIh1O5otkaA8FogfS9CT_qshb.exe
Resource
win10v2004-20260513-en
9 signatures
900 seconds
Behavioral task
behavioral2
Sample
Y8LIh1O5otkaA8FogfS9CT_qshb.exe
Resource
win11ltsc2024-20260709-en
9 signatures
900 seconds
Malware Config
Targets
-
- Target Y8LIh1O5otkaA8FogfS9CT_qshb.exe
- Size 22.0MB
- SHA256 11918d9589fbe67485c0c208372c1767c4abe82c6d94122bf239c1579651d3ee
- MD5 626bc5c22c662b5d5b982d6a0312101d
- SHA1 aaf0cf789fc2a5f957861ed85865add83510a1a0
- SHA512 2dd33ce2bc37c6b4438c8b1955378943bab1edfe9845ba55fee7266dbd4bfd6e44e64f13dfe256f62c7ce020bccdbdf1679cb67d6e856f4dfb398bb54c23f656
- SSDEEP 393216:BilhpFAl5nezJIdPAsKiuZqi+odepneorCTMD+R0/qflLg2LX0DGnKJeekA:BeclczJISszmaodelBrOLgu0qnKJeek
- TLSH T1CE3733D43AD0D26DC09AC435C28787F5F0936FD89EBA941BBFC609122570B96CCB2979
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger