General
- Target SoulTaker.rar
- Size 9.7MB
- Sample260818-scc33awsbs
- SHA256 c2377d634c7a959c9ed3ea81892cfa186134f79a455764f2cc20997396bd9e13
- MD5 4805357b2a54d2aee91ec7b72cee2c15
- SHA1 d090c3aa28eae09e3f48e527e8fb3c9fe614d026
- SHA512 abc1ab57747cb630dd754fa0e4009b5ed1a3b119758d0129c6d7d66979d08b11d33698413f6d9ea2e0b6c1a08b7c1a53b5221afb8840efee7f828d031311f452
- SSDEEP 196608:MHgmecnSt38qsrW0RIGPBPG9cVts14CZNgQm7E3wj1p1/EZgBIgDs77:eJeHCNW0RZJPG9cYOMOVT1D/vvy7
- TLSH T167A63336AE1A187A1FC86FCA77B92B550125E1E53C78DFCC2DFE1801112B86D94F8963
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
SoulTaker.rar
Resource
win10v2004-20260513-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
SoulTaker.rar
Resource
win11ltsc2024-20260709-en
15 signatures
900 seconds
Malware Config
Targets
-
- Target SoulTaker.rar
- Size 9.7MB
- SHA256 c2377d634c7a959c9ed3ea81892cfa186134f79a455764f2cc20997396bd9e13
- MD5 4805357b2a54d2aee91ec7b72cee2c15
- SHA1 d090c3aa28eae09e3f48e527e8fb3c9fe614d026
- SHA512 abc1ab57747cb630dd754fa0e4009b5ed1a3b119758d0129c6d7d66979d08b11d33698413f6d9ea2e0b6c1a08b7c1a53b5221afb8840efee7f828d031311f452
- SSDEEP 196608:MHgmecnSt38qsrW0RIGPBPG9cVts14CZNgQm7E3wj1p1/EZgBIgDs77:eJeHCNW0RZJPG9cYOMOVT1D/vvy7
- TLSH T167A63336AE1A187A1FC86FCA77B92B550125E1E53C78DFCC2DFE1801112B86D94F8963
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.