General
- Target 6469edd613ceb62dd8e14a75628a6b75fa443ef4311da2b45e805bc7d18afe25.bin
- Size 113KB
- Sample260812-d2h82svsdw
- SHA256 6469edd613ceb62dd8e14a75628a6b75fa443ef4311da2b45e805bc7d18afe25
- MD5 6e29be65692ac21febe65c7973f09de8
- SHA1 09a341473ee54f3405eb36747e4b850cc92600cf
- SHA512 7673133d0476c2412f05cf35ba8eeb54849d879196d8b31434de9ff3ecb7fb2d8873bd5bc9114ee56c0b16f8fa14af1f924d5a49b41d477e12e0cb7a0a08cfee
- SSDEEP 3072:gDfqS3Kts1R1CMD5pbvA9ydI+0F5xNWWdiPNUNIV:cqSj1R4Mt1vwyq+GJWWdiVUNS
- TLSH T17CB312BADBD1F94224E334A00627A8345624B71DEBCDD73BE433135CA72CC1518AA23E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Tax_Notice_90849.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
Tax_Notice_90849.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
nvml.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
nvml.dll
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target Tax_Notice_90849.exe
- Size 287KB
- SHA256 93694473622f770d539263ae211dde4715264b0f23c858ba69796adca76cae35
- MD5 c9afda4f027fc9510134cffcc4d54da3
- SHA1 c5b5fb5f06d1f6cf98afa0df97f57e9bd7b454ed
- SHA512 91fc95c20e93059a470c5d6506ce368581679cb7b43216b44a5a1f2e440eee1729523935943226ad488a98cfc7ac7ce5888bae01ed359962feb3eb01e9b8e458
- SSDEEP 6144:/bMNk1Nfm0rfQBqZE+peAn5IEJvMqTBJNFmU:/71Nfhu+1mqTnNFmU
- TLSH T15A547D81FB866EFAEC79447C8AF1662AFB70B0180364C35B26989097DF133915D3A3D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target nvml.dll
- Size 9KB
- SHA256 31a3852f210044c5beb96515497f1178cb6549e4390ea4c6a1d8b8a5c9ac9639
- MD5 3a1013990ec26c269998cd6310fb585a
- SHA1 8c0dc6ef92d07fbbf1c2054e29ac97e944234ebd
- SHA512 812c50ea2be1bf2b3069a36b77c119bf6946acfed68ce49841f12aaa0036339fea54e70f5b73850c47bb6af413752fd0937dadd978aeeb96fc7201219d8bb88c
- SSDEEP 192:mxuxwzwd+Y/B+d6aDmCxwL39ukoa3S3kFbdDl9:mrwd+CODKLRDFpDl9
- TLSH T11012E834F34729EAE813EE3066E695327876BC3856282E7E10D0DF3F3914CC4292C902
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1