Analysis
- max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
15/08/2026, 14:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
General
- Target 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe
- Size 4.4MB
- Sample260815-rt8evsyxdt
- SHA256 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1
- MD5 8a01592acd84d5bdce781628027d6ea0
- SHA1 b4d03f1bd25ffb6176ecf933026083a3b3cfd42f
- SHA512 f622dbc86d6c5e1eb920b2bac1723f31100ae9998b67ee07276081076db273ce74a1e24688a138efef599b5833b2fdd2265efde01fea065eb5f30bfee10acdf4
- SSDEEP 49152:eFR3qz4lHdzZEmnh98TgeLxpERqd6fCTj4VKZDrlw1xk1khakMGHRUJuuLtGD41h:i3qzkvECQ
- TLSH T15C26BE239BD5E19DE2959934AAA70383C1767CDB872625D70EF038112FB79E02672F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\A: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\G: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\H: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\V: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\B: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\I: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\L: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\O: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\P: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\Q: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\U: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\W: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\E: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\J: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\M: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\T: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\Y: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\Z: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\K: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\N: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\R: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\S: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe File opened (read-only) \??\X: 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe - Drops file in Program Files directory 1 IoCs
description ioc Process File opened for modification C:\Program Files\7-Zip\7z.exe 5ea2c25c82d0c2ef5e03ea3a86c15f5ca4937e7146c8812c9544c988c4b720a1.exe