General
- Target Terentiy_Sovereign.exe
- Size 1011KB
- Sample260811-plsckaej4y
- SHA256 9ddac9cfb30711fffccf9f62a234c3246b0a09e4f131a7236d2e8ff0180a8690
- MD5 434dbe4cb9a703c400e00f75d2b15d95
- SHA1 134809e9fccd9a0e0df0ea6611c4cdf989d36c60
- SHA512 2f898c4a7742f6e431219614f26bb184b8985d3b9717f1fd674dbf729b577b7f26242ba11865fe478ee79686003e6f5ee9d8bd7aa3860d66c7092b4a236f2441
- SSDEEP 24576:NDFLF4KN6ac0dQjCR0wWC90vnfYon8jertqj:BFLNNzTdL0vfYon4ertqj
- TLSH T16F253CA266E70CE9DDD3277C66CBA3366739FE708B2A8B6B5244C0312D035D16E5D780
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Terentiy_Sovereign.exe
Resource
win10ltsc2021-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Terentiy_Sovereign.exe
- Size 1011KB
- SHA256 9ddac9cfb30711fffccf9f62a234c3246b0a09e4f131a7236d2e8ff0180a8690
- MD5 434dbe4cb9a703c400e00f75d2b15d95
- SHA1 134809e9fccd9a0e0df0ea6611c4cdf989d36c60
- SHA512 2f898c4a7742f6e431219614f26bb184b8985d3b9717f1fd674dbf729b577b7f26242ba11865fe478ee79686003e6f5ee9d8bd7aa3860d66c7092b4a236f2441
- SSDEEP 24576:NDFLF4KN6ac0dQjCR0wWC90vnfYon8jertqj:BFLNNzTdL0vfYon4ertqj
- TLSH T16F253CA266E70CE9DDD3277C66CBA3366739FE708B2A8B6B5244C0312D035D16E5D780
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.