General
- Target bd98581c496c9f41b04934a9c29fae175515844515bbc6041a0d8fd7d50bf138
- Size 3.2MB
- Sample260731-d64qjsvyfy
- SHA256 bd98581c496c9f41b04934a9c29fae175515844515bbc6041a0d8fd7d50bf138
- MD5 e717d3bb7cf05b3b5cac6b06a28438ae
- SHA1 9d417a44db8c63eacc29c37addbdb9ac15305d4b
- SHA512 12ff71d929892f13fa5e997f990e4c56e35d01a72e0641937580c29d987e5e67c125c787321ca8cc07f8af9428505004993a96e22557583b8e8bfa99069eb1d9
- SSDEEP 49152:obLsaLDRHxjy+wsdDqnroHODksLzZmLXpO9q+0ODHOt47xKnlWzVqZc:obpxRjBRcnsHuLzZcZy0ODH6lg
- TLSH T126F5F122FB51C376D0321A798C57DBAAA575BE204C3498677BE43F4C1F796803E26287
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bd98581c496c9f41b04934a9c29fae175515844515bbc6041a0d8fd7d50bf138.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target bd98581c496c9f41b04934a9c29fae175515844515bbc6041a0d8fd7d50bf138
- Size 3.2MB
- SHA256 bd98581c496c9f41b04934a9c29fae175515844515bbc6041a0d8fd7d50bf138
- MD5 e717d3bb7cf05b3b5cac6b06a28438ae
- SHA1 9d417a44db8c63eacc29c37addbdb9ac15305d4b
- SHA512 12ff71d929892f13fa5e997f990e4c56e35d01a72e0641937580c29d987e5e67c125c787321ca8cc07f8af9428505004993a96e22557583b8e8bfa99069eb1d9
- SSDEEP 49152:obLsaLDRHxjy+wsdDqnroHODksLzZmLXpO9q+0ODHOt47xKnlWzVqZc:obpxRjBRcnsHuLzZcZy0ODH6lg
- TLSH T126F5F122FB51C376D0321A798C57DBAAA575BE204C3498677BE43F4C1F796803E26287
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1