General
- Target Madium-Bootstrapper.zip
- Size 3.2MB
- Sample260802-jd2y5sep8t
- SHA256 8cde425e1913189403d07c4d14dd9acba8eafe35c9478f4a873e81d80bf9caba
- MD5 f91a41b4148fd20f5c91b405a4685dcd
- SHA1 b391bbe69bad41278dbb9411522cc68aad6bbfb6
- SHA512 4b36156549284e6b27c5a4a5a400b38116a748f7f04dde47965c345a7f6240b3b18c26e7db71f7df50ab00b826c66a24b41f83bbb72c95a927289585cc60216d
- SSDEEP 98304:yjv+kzDDipbhih0EmiCO6ewZM3b8RmPGh:ybzC3ih0EikrcmPs
- TLSH T1ABE533C081514F7E17CEBDB7C9280E601550F8D2B694228A9B647FBB7662F5E8F18B81
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Madium-Bootstrapper.exe
Resource
win11ltsc2024-20260709-en
25 signatures
150 seconds
Malware Config
Targets
-
- Target Madium-Bootstrapper.exe
- Size 6.9MB
- SHA256 5e6f74e8c460c747e6cd94cea8fa21271a83734b791e31a6e3c4d4e5f693efcb
- MD5 81ee0f82e959c755bdcb29c510249fbe
- SHA1 c6f9839f5452732af66b08a8ab9872f4f4bfc363
- SHA512 5873121197183f06e492d46e90a73550de261494a1a1572d16b9f295ad094acdd0df1f2415d41127751847e11bfb1c5216a0cf71a0eeaff9d06e364936e33522
- SSDEEP 98304:r+q6pQE5qQhw2AHVPVKKInBdw+gpiMQwySjcTc:rpYl9hw2AHVPVKKIQngwlj
- TLSH T11C76CF69A6BC00E9E466C1BCC2875223EB72B91517B153CF5A649AF60F23AD01F7F740
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.