General
- Target SETUP_ARCHIVE_(PASS_1221).zip
- Size 1.7MB
- Sample260808-yvzyfadj3w
- SHA256 c7c4bc7b70fabb0ba7c3b7b377e074f1606e0d40dda65a8aaa607394f900f865
- MD5 db670f8a48fc7a6eb87b5e013a3755fd
- SHA1 64563f2c1fb91620d86106c0cc3e180a53a33992
- SHA512 e778a749cc59c34e1996a04e0f48fb145330e9c94676803ceffa42b4771f9903527fcfbcdedaac040d7d5076efebc82f64dbc1ed1e96890268baddb9157c7de4
- SSDEEP 24576:MBI/tCZLv0AFyIJMVxxSb82d/ZZeHz5tpOvK6ECNIdbMse81tgjS1GgcRYBye1K8:MHZzpFLJokReQOCNQbMNmyjeGKQeO8KE
- TLSH T1C78533CE5CB43086C0761B077B4C6B924173B5AF4ECD5AA02BBB1345AEC72276D6627C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
SETUP_ARCHIVE_(PASS_1221).zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
SETUP_ARCHIVE_(PASS_1221).zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
PASS_KEY.png
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
PASS_KEY.png
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏_𝐅𝐈𝐋𝐄.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏_𝐅𝐈𝐋𝐄.zip
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target SETUP_ARCHIVE_(PASS_1221).zip
- Size 1.7MB
- SHA256 c7c4bc7b70fabb0ba7c3b7b377e074f1606e0d40dda65a8aaa607394f900f865
- MD5 db670f8a48fc7a6eb87b5e013a3755fd
- SHA1 64563f2c1fb91620d86106c0cc3e180a53a33992
- SHA512 e778a749cc59c34e1996a04e0f48fb145330e9c94676803ceffa42b4771f9903527fcfbcdedaac040d7d5076efebc82f64dbc1ed1e96890268baddb9157c7de4
- SSDEEP 24576:MBI/tCZLv0AFyIJMVxxSb82d/ZZeHz5tpOvK6ECNIdbMse81tgjS1GgcRYBye1K8:MHZzpFLJokReQOCNQbMNmyjeGKQeO8KE
- TLSH T1C78533CE5CB43086C0761B077B4C6B924173B5AF4ECD5AA02BBB1345AEC72276D6627C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target PASS_KEY.png
- Size 19KB
- SHA256 f73def92b8b3a9e26d427b06fac525296353fdd6bd887fce5d211676d6de13c7
- MD5 7810dc7e5cd70e826811fe087f5e00f4
- SHA1 7213edafe7d7b57676b1e3ba1459141452457eb7
- SHA512 830bf24d88c179bcbb645e839183e821b267d84ef0d9befc85a781e7f6e03d7077d92fa465821944d6c00d3d528ad32b7c0df4b4ba08140994011d0b0e95ae08
- SSDEEP 384:Ypooooooooooooooom2LPu+xCX07I5a8htlQ21f240He88RiffffKffffffffffC:bLLO07I48JJ92z+FoffffKfffffffffq
- TLSH T16092B513CB52807FB28C8280B4559D0352A13CBB3520DC966AEB755FAFA7FB50C74E69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target 𝟎𝐏𝐄𝐍_𝐒𝐄𝐓𝐔𝐏_𝐅𝐈𝐋𝐄.zip
- Size 1.7MB
- SHA256 373cb3a7520a6913dfa7fd9f348e2da2fff37b7b5914461dda90b32ef3cb3dd1
- MD5 470fe331f9fd56d6f699ccc2046bcd15
- SHA1 8bd2292ea11783252b491e42688d614f462055bd
- SHA512 0eb02c8ccfe914fc211cd554aeb8ab19c500675dbd8ca5173923627cbe6e5208b39ffd0ecdcd0da7414c9d66bd9e3a225d27c59f0254d603bc57b5b63abe10da
- SSDEEP 24576:kBI/tCZLv0AFyIJMVxxSb82d/ZZeHz5tpOvK6ECNIdbMse81tgjS1GgcRYBye1Kd:kHZzpFLJokReQOCNQbMNmyjeGKQeO8KF
- TLSH T1D98533CE4CB43486C0761B072B4C6BD64173B5AF4ECD5AA02B7B1346AAC72375D6A27C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10