General
- Target DownloadedMessage (81).zip
- Size 38KB
- Sample260731-q27mvsvxaz
- SHA256 35d00156139ad0dac4d47306e5ab4bbdef1edf00e9e2142b8266e5e40046221a
- MD5 5c5f7dc3ff2a45d25a948d036a6624da
- SHA1 d1d2bf18befac22d9818833cb60b9b22e02b0775
- SHA512 1008339255214fd66b8267797c1701f9b849d2d7aade2f714100fc29401b492dd7e0e681e6eb7aaab9248416afc9fc7b60d4599e600ac06756fb79ac15d124f0
- SSDEEP 768:tt8s/7mxJajB0DvcjQG/sV6M8YvQU/LVMS9dYKuGCjvps3nBpep:os/7Nt0DvcjQG/XaQU/ZrnCj2Bpep
- TLSH T11A03F107BF6C4E56694AC391673AD9B083EC76822D342EC32BC5318A06D71F578C58D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Connected Development, MNDA.docx
Resource
win10v2004-20260513-en
4 signatures
600 seconds
Behavioral task
behavioral2
Sample
Connected Development, MNDA.docx
Resource
win11ltsc2024-20260709-en
17 signatures
600 seconds
Malware Config
Targets
-
- Target Connected Development, MNDA.docx
- Size 30KB
- SHA256 20ff34b5e615180ebe71d710e700afd4791ff28bd9b1cb59aa948e2fe2512508
- MD5 a5e673fb770e8f9b686ea217b82b146f
- SHA1 7c779643e1ff36faaea2229b6cb5849e2f2abf53
- SHA512 b6227231827a628199e9ae0a9a674679a968e8b71f475538026196feec75b805bbcdb829f583f5448d485d0b98bb75ea0899126c6b2fa2c30bae588d3337a18a
- SSDEEP 768:tUfJ43RwaqREMrwULjOkTC2WYlwpIzdyaYEt:tE4/yEMd9jWEwpIzd2Et
- TLSH T16FE2D0BBD72FA0A4C4DE54B8E44AAA42FB10CE13E15A71C3B4C3629E5F857940B1297D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.