General
- Target the glue.zip
- Size 12.1MB
- Sample260814-snnc6sdp4y
- SHA256 012ac4671d46cb63ba7ebf3e2e3675e2baef4be0c590c3c759259589998ce0db
- MD5 55c38318be3b71d191ec78c5a6dd5240
- SHA1 33773446854be71516768fa383a64285fead4cf7
- SHA512 48b6819b2adc0e90d8a84d32dc1211bd204a87db91453eceda795212d7d5a5e0863820fa40693a2fd887b4a248f4a092988663c469818bbd57e29c4ff7f086ec
- SSDEEP 393216:1Ugd+MUw6qHEDReEkCa7bC4lg/Q0WSOOyT+to:DQ7xF9oG/Q0L+T+W
- TLSH T19CD6333F508A459025B24A1F898FD3CF429D5ACD6747971602B2DAEB0ECD720EAF8357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
the glue/run.rtf
Resource
win10v2004-20260513-en
4 signatures
900 seconds
Behavioral task
behavioral2
Sample
the glue/run.rtf
Resource
win11ltsc2024-20260709-en
17 signatures
900 seconds
Malware Config
Targets
-
- Target the glue/run.bat
- Size 882B
- SHA256 616d22ffd07736c43d859ff9929d3ec867df52a103fdb20cf374c29d742d4acf
- MD5 d35c34ad5ab6ac4cb1080db597c8fe11
- SHA1 475c5d68a550af33e673e02806612093ce34637b
- SHA512 651bce839342e3ce0a7a5724a06b4d726fa20f1a70daae0792a49e3841144498d899fc659773250df56fc6e157c9c04a2d7422c435fda313ceebc4d869b17c36
- TLSH T130117630E802EF34BED6043C82BA6D5FA067039CB4EC5F01D85085C82EB1A4D1ADB913
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.