General
- Target avast_decryptor_hermeticransom.exe
- Size 2.7MB
- Sample260805-plbptaah45
- SHA256 d27a35761a43145dc61f3656ef2190659b892ba6fdd2780aec7e58f42440687b
- MD5 926afef91bfec583b50d5622ea9c649e
- SHA1 6dd4c0217e0966adcb73443a9f194575b7f3231a
- SHA512 7db4c2a351127116575224759844929a350540ff84a9a77bf243c707e68da7209a36c1658d72a03cccf5df6f69f091e0e03f9910c1d6a6ae8b2bbd2737966d8f
- SSDEEP 49152:BNC4eEK2gh8O1Dsu9WRzeJZ1s6NuRkV8f7rNeXCLVyxmB4bdefVC7p:fK2giO1giCRHIXqVFBjVg
- TLSH T126D523473EE24D46EA914B38ECBCBE5901247FFA08245B0FB13A7E4D39B259B4934761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
avast_decryptor_hermeticransom.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target avast_decryptor_hermeticransom.exe
- Size 2.7MB
- SHA256 d27a35761a43145dc61f3656ef2190659b892ba6fdd2780aec7e58f42440687b
- MD5 926afef91bfec583b50d5622ea9c649e
- SHA1 6dd4c0217e0966adcb73443a9f194575b7f3231a
- SHA512 7db4c2a351127116575224759844929a350540ff84a9a77bf243c707e68da7209a36c1658d72a03cccf5df6f69f091e0e03f9910c1d6a6ae8b2bbd2737966d8f
- SSDEEP 49152:BNC4eEK2gh8O1Dsu9WRzeJZ1s6NuRkV8f7rNeXCLVyxmB4bdefVC7p:fK2giO1giCRHIXqVFBjVg
- TLSH T126D523473EE24D46EA914B38ECBCBE5901247FFA08245B0FB13A7E4D39B259B4934761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1