General
- Target dirt2o.exe
- Size 5.8MB
- Sample260802-1l7b9sselc
- SHA256 7fc1077fbfcea64236a4fde0d76058a469960d7d2269c2c0834e0902a9e67e49
- MD5 f8de02f4558c053468194b3ca3b01990
- SHA1 83db3062e148a77ba7daab18a59e51b6c8302044
- SHA512 051056d1c2de577c2cffc37110193cc83a76a8f025d03b28dd29ce9bab3d004e55ccba3b200f8b5114e6cecb851bf1f70af94088e0744af6ace818d4a9f48eb1
- SSDEEP 98304:pmMtvNa1A48K9zi22ZY7VoI016PswjGV2NNjrmW9mjhJIjQ:4M5w1AS022+xon16kmGV2NNjYjzIjQ
- TLSH T189562312A28554D3FC2637315C65F2CE071AF03277F846A25A92A81DDCCB6B6873DBE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dirt2o.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
dirt2o.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target dirt2o.exe
- Size 5.8MB
- SHA256 7fc1077fbfcea64236a4fde0d76058a469960d7d2269c2c0834e0902a9e67e49
- MD5 f8de02f4558c053468194b3ca3b01990
- SHA1 83db3062e148a77ba7daab18a59e51b6c8302044
- SHA512 051056d1c2de577c2cffc37110193cc83a76a8f025d03b28dd29ce9bab3d004e55ccba3b200f8b5114e6cecb851bf1f70af94088e0744af6ace818d4a9f48eb1
- SSDEEP 98304:pmMtvNa1A48K9zi22ZY7VoI016PswjGV2NNjrmW9mjhJIjQ:4M5w1AS022+xon16kmGV2NNjYjzIjQ
- TLSH T189562312A28554D3FC2637315C65F2CE071AF03277F846A25A92A81DDCCB6B6873DBE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger