General
- Target MemeSense.exe
- Size 10.0MB
- Sample260807-xfv59shf33
- SHA256 8f9ed1289a41b830b9bbc53da9950276b6dffd1cf3caf26edf115233db0ac572
- MD5 27cba91cd21ada7afe165622fb514252
- SHA1 68f17a2d5ef7b0c188cd275fece2f2809c8b831c
- SHA512 e63a15509d8dc39c22797ce0783857402ccd70ebb4a93fd53d0e6f8ba87a56e906f526c940564d19ccc213e4bea55b0562df18400ff4df212b88e40746cfdc48
- SSDEEP 196608:QCBUGi50W8UA7nGCxdGjP5Ui2bjKVPy2wE4/Fe8xZEQOwuCFvCxAX:QCBU7aW8bnGCnGjKi2bjRo4Ne8xZEbwf
- TLSH T1B0B63388BBC108D8E84B533998E69672D6F5B9320364C5DF1BF24D511E231E6FE78B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
MemeSense.exe
Resource
win10v2004-20260513-en
7 signatures
900 seconds
Behavioral task
behavioral2
Sample
MemeSense.exe
Resource
win11ltsc2024-20260709-en
3 signatures
900 seconds
Behavioral task
behavioral3
Sample
memesense.pyc
Resource
win10v2004-20260513-en
4 signatures
900 seconds
Behavioral task
behavioral4
Sample
memesense.pyc
Resource
win11ltsc2024-20260709-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target MemeSense.exe
- Size 10.0MB
- SHA256 8f9ed1289a41b830b9bbc53da9950276b6dffd1cf3caf26edf115233db0ac572
- MD5 27cba91cd21ada7afe165622fb514252
- SHA1 68f17a2d5ef7b0c188cd275fece2f2809c8b831c
- SHA512 e63a15509d8dc39c22797ce0783857402ccd70ebb4a93fd53d0e6f8ba87a56e906f526c940564d19ccc213e4bea55b0562df18400ff4df212b88e40746cfdc48
- SSDEEP 196608:QCBUGi50W8UA7nGCxdGjP5Ui2bjKVPy2wE4/Fe8xZEQOwuCFvCxAX:QCBU7aW8bnGCnGjKi2bjRo4Ne8xZEbwf
- TLSH T1B0B63388BBC108D8E84B533998E69672D6F5B9320364C5DF1BF24D511E231E6FE78B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target memesense.pyc
- Size 13KB
- SHA256 2ce86c047ede9b0695d43656cef2a06848b2bb1aec86a2efb69ad06e1a0b3658
- MD5 fe4089171d8bece7e0e092fb2c781a1e
- SHA1 46ea02424d5b1ffb29e3dd5dc43995c572aaf473
- SHA512 2b9d32d6d3d893d3882023607a730ad0e97e39c8f637719629e6d47690f34ad7a8d480d8aef2bc6aa5e2c68dc870680ba92c93ee026e57e35c9f6345e38174ce
- SSDEEP 384:eGniUzIRwr1Gz4Lfqzhmshc1LxlzKR6Xk:eGniUzI6r1Gz4LS13c1Nlc6U
- TLSH T1C652C68955508192FF78FCB640F20A14A3EE7962F6265232145E54FABCEB1B6CF7530C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.