General
- Target Tax_Notice_59555.img
- Size 364KB
- Sample260805-qm7djsgp41
- SHA256 990e62c5582e8ac53b088baaed751c554328819ff2c13840fdebc743f1834200
- MD5 319383e91d5f7df9a80dc46a6cc5b68d
- SHA1 b4334f2af710e72db942bd1c31a7ee1f1fa6bd7d
- SHA512 f5c12f1ce35f20d090423b2af0218d7a1d7a7d2afd0e84f6fbe50d6a6498ee15a639623d314e7ae9bba460473ffcb478cbf8f6f4c41645e9265bafbeb0d78402
- SSDEEP 6144:mLbMNk1Nfm0rfQBqZE+peAn5IEJvMqTBJNFm:W71Nfhu+1mqTnNFm
- TLSH T171847C81FB866EFAEC79447C8AB1662AFB71B0180374C35B369C9097DF132815D3A395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Tax_Notice_59555.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
Tax_Notice_59555.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Behavioral task
behavioral3
Sample
nvml.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
nvml.dll
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target Tax_Notice_59555.exe
- Size 287KB
- SHA256 93694473622f770d539263ae211dde4715264b0f23c858ba69796adca76cae35
- MD5 c9afda4f027fc9510134cffcc4d54da3
- SHA1 c5b5fb5f06d1f6cf98afa0df97f57e9bd7b454ed
- SHA512 91fc95c20e93059a470c5d6506ce368581679cb7b43216b44a5a1f2e440eee1729523935943226ad488a98cfc7ac7ce5888bae01ed359962feb3eb01e9b8e458
- SSDEEP 6144:/bMNk1Nfm0rfQBqZE+peAn5IEJvMqTBJNFmU:/71Nfhu+1mqTnNFmU
- TLSH T15A547D81FB866EFAEC79447C8AF1662AFB70B0180364C35B26989097DF133915D3A3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target nvml.dll
- Size 9KB
- SHA256 2d68b6dadcd909f3859a3baae503260b6247d08208fde6f7840604af5f7e469c
- MD5 208415e6288fe1b8c6a347b0ce4da7a5
- SHA1 3e29b14922d970e768c42002a407410151edfe58
- SHA512 dcf6d15fa30d942244bae70cd49bdad5d422b9339dcccd3e4cf708c39ef87fe698ada8d83f9640d35036a750619126d12890d56c72978a3bdaaa79134728d397
- SSDEEP 192:9hWu7rMY7GdHyFxIrrroXUS5s8FbdDl9:LxMEeyF2clFpDl9
- TLSH T19B12D831F39A18DAE453EF3466E3953678B6B82856282E7D10E0DF3F3914DC4656CE02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1