General
- Target Terentiy_Sovereign.exe
- Size 1011KB
- Sample260811-pal2eayxcz
- SHA256 d258180a78565d90140eb42a70d14734c59a8045eaf0d20a6346a1b5b3302487
- MD5 b90a55ac92ac392c16f5d45c5b1a6e0f
- SHA1 7d0bb198e82f169c2fa9b9dffd501e9085b3f56d
- SHA512 6fdda792097ef354013d17ec31aa678e26d095ee3bd00313d7006125dd6a1c0ea0802f8f93c7b27dcb0cf08fa94c368a365b43724c281fc3dfea2b6be8d5ae5a
- SSDEEP 24576:QTFLF4KN6acPdsjCR0wWC90vnfYon8jertqj:IFLNNzodn0vfYon4ertqj
- TLSH T1D3253CA266E70CE9DDD3277C66CBA3366739FE708B2A8B6B5244C0312D035D16E5D780
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Terentiy_Sovereign.exe
Resource
win10ltsc2021-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Terentiy_Sovereign.exe
- Size 1011KB
- SHA256 d258180a78565d90140eb42a70d14734c59a8045eaf0d20a6346a1b5b3302487
- MD5 b90a55ac92ac392c16f5d45c5b1a6e0f
- SHA1 7d0bb198e82f169c2fa9b9dffd501e9085b3f56d
- SHA512 6fdda792097ef354013d17ec31aa678e26d095ee3bd00313d7006125dd6a1c0ea0802f8f93c7b27dcb0cf08fa94c368a365b43724c281fc3dfea2b6be8d5ae5a
- SSDEEP 24576:QTFLF4KN6acPdsjCR0wWC90vnfYon8jertqj:IFLNNzodn0vfYon4ertqj
- TLSH T1D3253CA266E70CE9DDD3277C66CBA3366739FE708B2A8B6B5244C0312D035D16E5D780
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.