General
- Target Loader(1).exe
- Size 12.8MB
- Sample260812-we464ssaka
- SHA256 7ba1aab4a16176f27c61c71152dcad868ce4fd8ae536c1d914f4640f258382d5
- MD5 e6eb33234d51093c0b1e7bb82c604b4b
- SHA1 616c038b873ad50d5cc3a7974ae84ed361717445
- SHA512 2cca95f29c356fb191ad22ebb0c25d53bd34ef82ff2b2bfbaacd97f4daefe562e685149c8fb7ecfae0c871f545428c77894c58592772cbcd827654193b6fa48e
- SSDEEP 393216:exg7HE+W+eGQR59joL7Yx4rj88Vj1CioRrc7:euHW+e5R59MLm4rjod
- TLSH T195D63341E2EC1BF6D4B1853ECE428517EA32BC510BB8CBDF87B991512E632C59D3A724
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Loader.js
Resource
win10v2004-20260513-en
18 signatures
600 seconds
Behavioral task
behavioral2
Sample
Loader.js
Resource
win11ltsc2024-20260709-en
15 signatures
600 seconds
Malware Config
Targets
-
- Target Loader.pyc
- Size 57KB
- SHA256 6e9561d28916cecd8eae92a3cff6c1c38885ed4fa31f04ed55d251f8f1e5db33
- MD5 494616330e6e7f94c9d1cb62c4a359f4
- SHA1 cf323df069a04b8734825b6bf168f299f55e86b9
- SHA512 269b07ae443231b1f7ac6183223e91cbc26b65fcb37ef64a882ab0bd665433bbbd33352f7e29363ac98c9e5df86233a2307b7711d9c94807ec0ae7300db7f4c0
- SSDEEP 768:HWCGiTlw/BHC0pf7cMsv9ADKxNFtPSIPh0tqXWj0e/AX9uf56:HWCGa9bMyXNnPSWh0tqXWj0eoX9uf56
- TLSH T1D243E8B7A6A34036F963E6B52B57134A7730D107B602C7093EFC15958FCAAD89C722D8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.