General
- Target AE.exe
- Size 51.6MB
- Sample260809-jas7tstakf
- SHA256 be4ac383b9477ba16a58c2da2b03977673fb8b7b096a0236d4f428cfa6b5c584
- MD5 f49e2de70fed79d8511aed2bc15d3fdc
- SHA1 f847a5f7ebbfaf1cda83935558e994415680af66
- SHA512 2973f2e3c20e32837610f551aa269f57af9977c8b12860d5b87be4ef7f5a51b553c8523ee74cfc7f9dcfe909bfdb240d2e11f5de8a4e4c84a57d2a475d15bc63
- SSDEEP 786432:U2sU/7yFaneax9TTfy3iK786wzkyBQFgzTUXeNw8m5lRmRjIjzADhrp3lPOZdG:L3/0+l+RBwXzTUX0w8mxmxGOlGZo
- TLSH T136C7224AF2B810EDC87BC078CA571D27E7B13459132497DB51664AA82F2BBE19F3D321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AE.exe
Resource
win10v2004-20260513-en
16 signatures
900 seconds
Behavioral task
behavioral2
Sample
AE.exe
Resource
win11ltsc2024-20260709-en
15 signatures
900 seconds
Malware Config
Targets
-
- Target AE.exe
- Size 51.6MB
- SHA256 be4ac383b9477ba16a58c2da2b03977673fb8b7b096a0236d4f428cfa6b5c584
- MD5 f49e2de70fed79d8511aed2bc15d3fdc
- SHA1 f847a5f7ebbfaf1cda83935558e994415680af66
- SHA512 2973f2e3c20e32837610f551aa269f57af9977c8b12860d5b87be4ef7f5a51b553c8523ee74cfc7f9dcfe909bfdb240d2e11f5de8a4e4c84a57d2a475d15bc63
- SSDEEP 786432:U2sU/7yFaneax9TTfy3iK786wzkyBQFgzTUXeNw8m5lRmRjIjzADhrp3lPOZdG:L3/0+l+RBwXzTUX0w8mxmxGOlGZo
- TLSH T136C7224AF2B810EDC87BC078CA571D27E7B13459132497DB51664AA82F2BBE19F3D321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Loads dropped DLL
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.