General
- Target fe380fb4c67c959e591a7d791a5ef504887b9ef9fa29c03e7ab46af91dd39fe8
- Size 3.2MB
- Sample260730-zew3aaztht
- SHA256 fe380fb4c67c959e591a7d791a5ef504887b9ef9fa29c03e7ab46af91dd39fe8
- MD5 533218c245f87d5258279c83c47570cc
- SHA1 d5ec4ca8d8be6c7f5dac1eda9e9b4840e9a0cf21
- SHA512 25c7c8971bbe71ecf1df98c36ea6dd8aac64d033a84e73a00d4afb8b2d4327855695f5fbd7dd42783a90b5e1e51c6a2988ccb0950e10d99b6500137e7a27f577
- SSDEEP 49152:obLsaLD5Hxjy+wsdDqnroHOaBHDDtzX+zQgMHR/HMxfIHOt47xKnlWzVqZc:obpZRjBRcnsHHNX+UgoM5IH6lg
- TLSH T192F50222FB91C77AD0321A794C57DBAA9539BE204C349C273BE43F5D1F756813A26283
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fe380fb4c67c959e591a7d791a5ef504887b9ef9fa29c03e7ab46af91dd39fe8.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target fe380fb4c67c959e591a7d791a5ef504887b9ef9fa29c03e7ab46af91dd39fe8
- Size 3.2MB
- SHA256 fe380fb4c67c959e591a7d791a5ef504887b9ef9fa29c03e7ab46af91dd39fe8
- MD5 533218c245f87d5258279c83c47570cc
- SHA1 d5ec4ca8d8be6c7f5dac1eda9e9b4840e9a0cf21
- SHA512 25c7c8971bbe71ecf1df98c36ea6dd8aac64d033a84e73a00d4afb8b2d4327855695f5fbd7dd42783a90b5e1e51c6a2988ccb0950e10d99b6500137e7a27f577
- SSDEEP 49152:obLsaLD5Hxjy+wsdDqnroHOaBHDDtzX+zQgMHR/HMxfIHOt47xKnlWzVqZc:obpZRjBRcnsHHNX+UgoM5IH6lg
- TLSH T192F50222FB91C77AD0321A794C57DBAA9539BE204C349C273BE43F5D1F756813A26283
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1