General
- Target dc7b4b8095d8c61dd616879d7c1b94a6f17bb49712a2a3fdf89e140cf3a8e6a8
- Size 15.3MB
- Sample260731-sld2qaap3z
- SHA256 dc7b4b8095d8c61dd616879d7c1b94a6f17bb49712a2a3fdf89e140cf3a8e6a8
- MD5 3c68c50b37f7acf6d2338f1f559b10e8
- SHA1 7b5a937ee95819a1c14cb34bda9f9120d22cdadc
- SHA512 3dbde7177cb5573e18b123d35bd429a2cba727f365d0d5f8cc6676c464d231acdc36af0b55b50ea70a97b96675dab0c104b4390dfb9c4b2652e5c252ce44b9ba
- SSDEEP 393216:RSVc86LcJmAI4F0tVYNTXVPaxfMvQPRw8:RShwYmAIy0bY1lPagh8
- TLSH T17BF623E6BEC5A1E4C4C38F40638B93DE72F2A2DA4265982D37C77C029931D974749E27
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dc7b4b8095d8c61dd616879d7c1b94a6f17bb49712a2a3fdf89e140cf3a8e6a8.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
dc7b4b8095d8c61dd616879d7c1b94a6f17bb49712a2a3fdf89e140cf3a8e6a8.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target dc7b4b8095d8c61dd616879d7c1b94a6f17bb49712a2a3fdf89e140cf3a8e6a8
- Size 15.3MB
- SHA256 dc7b4b8095d8c61dd616879d7c1b94a6f17bb49712a2a3fdf89e140cf3a8e6a8
- MD5 3c68c50b37f7acf6d2338f1f559b10e8
- SHA1 7b5a937ee95819a1c14cb34bda9f9120d22cdadc
- SHA512 3dbde7177cb5573e18b123d35bd429a2cba727f365d0d5f8cc6676c464d231acdc36af0b55b50ea70a97b96675dab0c104b4390dfb9c4b2652e5c252ce44b9ba
- SSDEEP 393216:RSVc86LcJmAI4F0tVYNTXVPaxfMvQPRw8:RShwYmAIy0bY1lPagh8
- TLSH T17BF623E6BEC5A1E4C4C38F40638B93DE72F2A2DA4265982D37C77C029931D974749E27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Indicator Removal: Clear Windows Event Logs
Clear Windows Event Logs to hide the activity of an intrusion.
-
Drops desktop.ini file(s)
-
Drops file in System32 directory