General
- Target Terentiy_Sovereign.exe
- Size 1011KB
- Sample260811-pmfp6ay1es
- SHA256 7161e589bceaa63f79669599ee69e2aa9ce9193a46e775de1c5ba5fcedcce684
- MD5 077ea695863f1f0d549ecac6a9842a4f
- SHA1 c3c31aa2eff304ea4543ff7fd03a45cb3cf854f8
- SHA512 643e6b7483596aa251980cf828df4897c14cc384c32c0ae52c66e5b9f2d3bcbd082239bf977d9100792862263b9a59560dba7991774c18ab6f2117218df17dc9
- SSDEEP 24576:nDFLF4KN6acZdbjCR0wWC90vnfYon8jertqj:DFLNNzCd+0vfYon4ertqj
- TLSH T127253CA266E70CE9DDD3277C66CBA3366739FE708B2A8B6B5244C0312D035D16E5D780
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Terentiy_Sovereign.exe
Resource
win10ltsc2021-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Terentiy_Sovereign.exe
- Size 1011KB
- SHA256 7161e589bceaa63f79669599ee69e2aa9ce9193a46e775de1c5ba5fcedcce684
- MD5 077ea695863f1f0d549ecac6a9842a4f
- SHA1 c3c31aa2eff304ea4543ff7fd03a45cb3cf854f8
- SHA512 643e6b7483596aa251980cf828df4897c14cc384c32c0ae52c66e5b9f2d3bcbd082239bf977d9100792862263b9a59560dba7991774c18ab6f2117218df17dc9
- SSDEEP 24576:nDFLF4KN6acZdbjCR0wWC90vnfYon8jertqj:DFLNNzCd+0vfYon4ertqj
- TLSH T127253CA266E70CE9DDD3277C66CBA3366739FE708B2A8B6B5244C0312D035D16E5D780
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.