General
- Target 05082026_0408_03082026_Tax_Notice_84627.exe.iso
- Size 364KB
- Sample260805-eqfjfsdb66
- SHA256 24bffa830cdacecd5f1bef08add506882c7e15c310776515431783c8a422ee3e
- MD5 7827367ebd9b28f0e625ec17ca373034
- SHA1 e08f77e9386f858c60ccb7731d31d732660a4f69
- SHA512 fcd53a2c89ca00f3025427a025020326c5449b6ddfa3ab962991cb731831911e80439d90b95de6a3471ad16d64eaedea1c52b7c3b812528d25b9af5c1580e5bf
- SSDEEP 6144:dqLbMNk1Nfm0rfQBqZE+peAn5IEJvMqTBJNFm:dy71Nfhu+1mqTnNFm
- TLSH T1F9847C81F7866EFAEC7A447C89B1662AFB71B0180374C35B369C9097DF132815E3A395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Tax_Notice_84627.exe
Resource
win10v2004-20260513-en
13 signatures
300 seconds
Behavioral task
behavioral2
Sample
Tax_Notice_84627.exe
Resource
win11ltsc2024-20260709-en
13 signatures
300 seconds
Behavioral task
behavioral3
Sample
nvml.dll
Resource
win10v2004-20260513-en
0 signatures
300 seconds
Behavioral task
behavioral4
Sample
nvml.dll
Resource
win11ltsc2024-20260709-en
0 signatures
300 seconds
Malware Config
Targets
-
- Target Tax_Notice_84627.exe
- Size 287KB
- SHA256 93694473622f770d539263ae211dde4715264b0f23c858ba69796adca76cae35
- MD5 c9afda4f027fc9510134cffcc4d54da3
- SHA1 c5b5fb5f06d1f6cf98afa0df97f57e9bd7b454ed
- SHA512 91fc95c20e93059a470c5d6506ce368581679cb7b43216b44a5a1f2e440eee1729523935943226ad488a98cfc7ac7ce5888bae01ed359962feb3eb01e9b8e458
- SSDEEP 6144:/bMNk1Nfm0rfQBqZE+peAn5IEJvMqTBJNFmU:/71Nfhu+1mqTnNFmU
- TLSH T15A547D81FB866EFAEC79447C8AF1662AFB70B0180364C35B26989097DF133915D3A3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target nvml.dll
- Size 9KB
- SHA256 98f78334ff5a02991efdeae29d20b2caec3fb78bd2b6b7bb8fdfbbf5c6f37e8d
- MD5 3a214e3954a8189120a33134c31d15e5
- SHA1 54fd902634656394c4e343db47de4a7d87feb756
- SHA512 5fe4ed3fe6af61b40a6e1567ada076ac3f5b40f9c03a9ac6138f8507217c5c4f230f18f764e46f6bbedb33222be363756efce1452ad064a9134ed38c4cce7cd9
- SSDEEP 192:uAusGJ4cuY/B+dCaDmCxwL39ukoa3S3sFbdDl9:u1acuCWDKLRPFpDl9
- TLSH T1A312D734F35725EAE863EE3066E6A5367876BC3856686E7D14D0DF3F3914CC4292C902
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1