General
- Target 2026-08-12_ce8c3e5a4736be0201ada4a6a8194b1e_blankgrabber_cobalt-strike_glassworm_icedid_luca-stealer_njrat_satacom_vidar
- Size 100.3MB
- Sample260812-qbb39sch24
- SHA256 a210819f19af5fa30d07599d158b122d59ccc02500a01d5b9669e117496b6ecd
- MD5 ce8c3e5a4736be0201ada4a6a8194b1e
- SHA1 3518c16c34dea77f4e86984431476a0ddbcaa9d3
- SHA512 e7dda65ed47287ba9b659fe35d202e815d802dfba491b5c6818278996e1b8a3b4310d0baf585f345c5cdcdbd109f4d0920f87bf130c2daea036d2a5cf90344a9
- SSDEEP 3145728:2CgYRPSC++6y9WuDX5M3gbcKCwX2qHO5i0mQga:2CxaC4y9WuDE2Cw1HCi0n
- TLSH T1BD3833956BA964A6FAEEC23795D0874CBA4170CE8327875B6BF00033099F6C5CD7FA14
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
hzzh.pyc
Resource
win10v2004-20260513-en
15 signatures
600 seconds
Behavioral task
behavioral2
Sample
hzzh.pyc
Resource
win11ltsc2024-20260709-en
16 signatures
600 seconds
Malware Config
Targets
-
- Target hzzh.pyc
- Size 94KB
- SHA256 556f997c5f7803233e2c443e34c0bdde77ca546ea5e213c138ba73aa528d581f
- MD5 55207efe1b7bd3e18b818026941a30cd
- SHA1 6823c6fd1748704b14006136f9a2616b0288c366
- SHA512 27b1d12c92eb5328efda3ed2d0772e928105d5c6645ff176e786d787f58489b83eeced9eaf2153640f9be576b00c82e3f26c76e963642c33e2a3c1161b5c1917
- SSDEEP 768:aDgQmTnZV4AzsGqxkYCOnCdyFZFgWbJ9+sj9reLNjuumeLZzJlscBr0YMrLcVp8y:aDkTnr03PfxVeLtuu3ZV/HJQsy20Fw
- TLSH T14993B7427776E2BBF848B775841A231AB3B5C8F2B380CB57776AA1397D567142C810EC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.