General
- Target hitfx.rpf
- Size 25.0MB
- Sample260731-lr6wcszepb
- SHA256 11edf5844263ce01e83f395623fb53ca105cc911dcbf65269b8da2a194b790b9
- MD5 68593bfa14e29ce2c9d4bf61a1c29338
- SHA1 36eaaacf95b6de5fa143185ddbad44c8c37b0465
- SHA512 691ec00c315c954089087cbb50464073db88eec947455f00f199f7688922b50e11626c4e8ba7292e3b9f44443e893d85e46da766b2d7bac99da689ac2b783b89
- SSDEEP 24576:JyZ1jKDme7i8LXDzT41f8ORbIXpjIT2c:JyZ1j0mjaLNYIpjK2
- TLSH T15B472382E1E06165CE801237A07AB97E06E56567089CBF5FE33275264C1B83A37B15EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
hitfx.rpf
Resource
win11ltsc2024-20260710-en
23 signatures
900 seconds
Malware Config
Targets
-
- Target hitfx.rpf
- Size 25.0MB
- SHA256 11edf5844263ce01e83f395623fb53ca105cc911dcbf65269b8da2a194b790b9
- MD5 68593bfa14e29ce2c9d4bf61a1c29338
- SHA1 36eaaacf95b6de5fa143185ddbad44c8c37b0465
- SHA512 691ec00c315c954089087cbb50464073db88eec947455f00f199f7688922b50e11626c4e8ba7292e3b9f44443e893d85e46da766b2d7bac99da689ac2b783b89
- SSDEEP 24576:JyZ1jKDme7i8LXDzT41f8ORbIXpjIT2c:JyZ1j0mjaLNYIpjK2
- TLSH T15B472382E1E06165CE801237A07AB97E06E56567089CBF5FE33275264C1B83A37B15EF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.