General
- Target 04082026_1659_04082026_Tax_Notice_50564.exe.iso
- Size 364KB
- Sample260804-vhx2jas1a1
- SHA256 4dde04e01cf136a47b66093b849558b22b8d06430086ffd5f8a3de39b04538a2
- MD5 07a0c55c3327dda6ee9eb0ae8d121972
- SHA1 96879c33d72cf423c298947c326e59ceb93fd548
- SHA512 ac72633c9f27305cacccbfd87c53c6525c7c2ae5ba1918f1cc4a00f39f3506af6deb2787f20757c728c71389c1efea50031af45f80e73a3a5b03a0b16560f7d1
- SSDEEP 6144:wpLbMNk1Nfm0rfQBqZE+peAn5IEJvMqTBJNFm:w571Nfhu+1mqTnNFm
- TLSH T198847C81FB866EFAEC79447C8AB1662AFB71B0180374C35B369C9097DF132815D3A395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Tax_Notice_50564.exe
Resource
win10v2004-20260513-en
13 signatures
300 seconds
Behavioral task
behavioral2
Sample
Tax_Notice_50564.exe
Resource
win11ltsc2024-20260709-en
13 signatures
300 seconds
Behavioral task
behavioral3
Sample
nvml.dll
Resource
win10v2004-20260513-en
0 signatures
300 seconds
Behavioral task
behavioral4
Sample
nvml.dll
Resource
win11ltsc2024-20260709-en
0 signatures
300 seconds
Malware Config
Targets
-
- Target Tax_Notice_50564.exe
- Size 287KB
- SHA256 93694473622f770d539263ae211dde4715264b0f23c858ba69796adca76cae35
- MD5 c9afda4f027fc9510134cffcc4d54da3
- SHA1 c5b5fb5f06d1f6cf98afa0df97f57e9bd7b454ed
- SHA512 91fc95c20e93059a470c5d6506ce368581679cb7b43216b44a5a1f2e440eee1729523935943226ad488a98cfc7ac7ce5888bae01ed359962feb3eb01e9b8e458
- SSDEEP 6144:/bMNk1Nfm0rfQBqZE+peAn5IEJvMqTBJNFmU:/71Nfhu+1mqTnNFmU
- TLSH T15A547D81FB866EFAEC79447C8AF1662AFB70B0180364C35B26989097DF133915D3A3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target nvml.dll
- Size 9KB
- SHA256 cfb7d08b7b62b972c1db5d0205c2e7a1f07e9df748e8a1201722265ee46cb248
- MD5 9cf5e389f0cf680596e2b0dbde86b2be
- SHA1 47918581bf3fe6c9bb64dfa44530bf5442d677ed
- SHA512 07638cf58123db391d4b5a13077565aba422b4be35c9e01ef174cf4f07e798a65d1bdc705d78f0c0abcdce61e296b80c818b4b9f207f81a28463d79a050915e9
- SSDEEP 96:kTImupOrNc0Y7dakO6w1ZPCls1ZKOZghKH1yhx8Qa1LoBUS75GRlguN57bdDft4m:kThupOJnY7zkkmxLrroBUSFcFbdDl9
- TLSH T19612D835F79729EAD857EF3426D6A53278B6B82816286E7E10D0DB3F3915DC4283C902
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1