General
- Target Read.zip
- Size 242B
- Sample260818-zh16eahk5y
- SHA256 13e75e4c026b6c65f5c0b4636326f1401f3e90b5a0a6652cefbf8f9baadb85c6
- MD5 333e46fe8d1421973a2b1db159b1d685
- SHA1 68d78f276287830b21abeee4dcce0f4e403b686c
- SHA512 0cc9a786871814704f6278d039e4618fdd3587d4f183708201a91a1d78a195491bda8b116d851456b279c6d4a9502e3712a7a86fa59ac691ceb059154200784e
- TLSH T17AD0233576354957C9D352F743C847513184134F6404263F001C5DE11C010CE473B394
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Read.zip
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral2
Sample
Read.zip
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
Read.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral4
Sample
Read/Use Commands on Pluh Bot.txt
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral5
Sample
Read/Use Commands on Pluh Bot.txt
Resource
win11-20260513-en
Behavioral task
behavioral6
Sample
Read/Use Commands on Pluh Bot.txt
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Read.zip
- Size 242B
- SHA256 13e75e4c026b6c65f5c0b4636326f1401f3e90b5a0a6652cefbf8f9baadb85c6
- MD5 333e46fe8d1421973a2b1db159b1d685
- SHA1 68d78f276287830b21abeee4dcce0f4e403b686c
- SHA512 0cc9a786871814704f6278d039e4618fdd3587d4f183708201a91a1d78a195491bda8b116d851456b279c6d4a9502e3712a7a86fa59ac691ceb059154200784e
- TLSH T17AD0233576354957C9D352F743C847513184134F6404263F001C5DE11C010CE473B394
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Read/Use Commands on Pluh Bot.txt
- Size 86B
- SHA256 23f7094552216083f2620b4688081c57d859d7dc8a66d065f91e1664b24496f6
- MD5 791bbe346e51adead9766901849ab5fe
- SHA1 99361b14301cca8bee9cabdf870a18d9d3792751
- SHA512 800104b48d7d597d70da59a775655552a5dc986898086a73dbd339d024543d65eaa6912d8365f7f19540bc044c8e1220db127208903c0fa95d7c4792f6fa7432
- TLSH T1E9A012A203BC42510A104951195943D401023315060B1E06F1A02C194101010A7202C0
- MD5 SHA1 SHA512 TLSH
Score3/10