General
- Target ANTIPUBLIC.exe
- Size 71.8MB
- Sample260815-sqqlbadm9s
- SHA256 4c2ee3969a8b7945163b99e25afb17a00e155215f4378d0ac7f6eb622a18bdff
- MD5 26c02dc1106934fa5099ed53a50921b2
- SHA1 7760ede8c582dea0403825095c7b5470905fac84
- SHA512 a8b001f6d10e5eeac7ce5cced166457ee5a83593c5a771d21fc2d05406a541ab867b38f181bb3a54c72c548440d0c384b5f7508263dded0a05e661e121551872
- SSDEEP 1572864:mPvWzPEhqKV/3P3R8fNknAnZ2yOogqTcaNH21A/3c3K4VnolEch5T/:mPvRB/h8fNknAnIdA7lxMa4VnoKch1
- TLSH T144F7339D7F80A941F29F933B5590C92AAC20D7CD1B6B84A3979418722F332DAF975D30
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ANTIPUBLIC.pyc
Resource
win10v2004-20260513-en
15 signatures
900 seconds
Behavioral task
behavioral2
Sample
ANTIPUBLIC.pyc
Resource
win11ltsc2024-20260709-en
14 signatures
900 seconds
Malware Config
Targets
-
- Target ANTIPUBLIC.pyc
- Size 67KB
- SHA256 5dc4dcde52268595e0e02f38b3683739313a582e1ad1deeaae58c6235c3ad219
- MD5 12b8a4d9e92e22d58bd1e8cacaf280dd
- SHA1 2c710a1c6a566271acae3b29bbb83af11847ecd9
- SHA512 7b7e6cad1fb6fa9c84bf23747a6705fa8be06e924b4b886cd16e24b4003f21bb154f869e793107759d938696ce76d6870683edb62e739abaa23c8f1b519c8548
- SSDEEP 768:CM1FImK2WRHrttVZCpJ009q4Wmq/PZZ1R6Twgrl0stl8tmsyYyi0MViM9tqZp57k:FQR6j7sZZ1OwAFj8tVyYy7i44
- TLSH T159631A5AB9B4A486EF10F07180E84914E3BD6EE7B615C336311E06797EDB6B9CD9230C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.