General
- Target spoofer.exe
- Size 13KB
- Sample260807-27m17axygv
- SHA256 0dc4e4763eaf5262cf97816278d5dd1a63051ba9b1e9ad0156a061e68866d7ee
- MD5 bb34fdd2fe9c8cffe92f13c71c397a3e
- SHA1 30e34cc2e4449d2b83f69af3387885f1e0db8ed4
- SHA512 bc856d4e4c8ca2a9181379b951552e8385dba6dfa1d2794d7f01206077a121da5ba1fc5ec2a0556fca7bbf44768e88799fb40f0fefc1f9502b2efad24973ede0
- SSDEEP 192:RfcJBen4Cnrt4sYQL+MMs5s78FD53pdY3Q5tfZ/Yq0x:Rc24ls7tR3Y3R
- TLSH T1DF525B5BBB520CFBE6398275C0730D25E237BA211BF3174F4B7A22191EE24D0AC266C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
spoofer.exe
Resource
win10v2004-20260513-en
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
spoofer.exe
Resource
win11ltsc2024-20260709-en
15 signatures
900 seconds
Malware Config
Targets
-
- Target spoofer.exe
- Size 13KB
- SHA256 0dc4e4763eaf5262cf97816278d5dd1a63051ba9b1e9ad0156a061e68866d7ee
- MD5 bb34fdd2fe9c8cffe92f13c71c397a3e
- SHA1 30e34cc2e4449d2b83f69af3387885f1e0db8ed4
- SHA512 bc856d4e4c8ca2a9181379b951552e8385dba6dfa1d2794d7f01206077a121da5ba1fc5ec2a0556fca7bbf44768e88799fb40f0fefc1f9502b2efad24973ede0
- SSDEEP 192:RfcJBen4Cnrt4sYQL+MMs5s78FD53pdY3Q5tfZ/Yq0x:Rc24ls7tR3Y3R
- TLSH T1DF525B5BBB520CFBE6398275C0730D25E237BA211BF3174F4B7A22191EE24D0AC266C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.