General
- Target OnlyAira.zip
- Size 18.9MB
- Sample260820-ajxryayzht
- SHA256 0769c86dbd1e97e6c727a7e9752263115a2d44b346afde0c26005b56899c6e85
- MD5 6ee96cef0d99fa459aebfca167aa9514
- SHA1 7a642ef3e8a54ca634cf67b4cbd9c6b493f52d42
- SHA512 bdcfcd7acf3a37b7af4773bc95e291212cfef2d90bc614c103074585a93bcdf5a719f2a130193ade95f73f3f881e1ee5f064c312fcf6931b79c38412ef8047a1
- SSDEEP 393216:TBOW2v6wFWAV/ppAznqbG9e45en14r6cSr9:lOWat1pqnqbG35eer6cI
- TLSH T1411733F6D2CE2077C447BA39A749D3E486E8F3B5C735465205AEC7E83A2F4A09794708
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
OnlyAira.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
OnlyAira.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
OnlyAira/ReadME.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
OnlyAira/ReadME.txt
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target OnlyAira.zip
- Size 18.9MB
- SHA256 0769c86dbd1e97e6c727a7e9752263115a2d44b346afde0c26005b56899c6e85
- MD5 6ee96cef0d99fa459aebfca167aa9514
- SHA1 7a642ef3e8a54ca634cf67b4cbd9c6b493f52d42
- SHA512 bdcfcd7acf3a37b7af4773bc95e291212cfef2d90bc614c103074585a93bcdf5a719f2a130193ade95f73f3f881e1ee5f064c312fcf6931b79c38412ef8047a1
- SSDEEP 393216:TBOW2v6wFWAV/ppAznqbG9e45en14r6cSr9:lOWat1pqnqbG35eer6cI
- TLSH T1411733F6D2CE2077C447BA39A749D3E486E8F3B5C735465205AEC7E83A2F4A09794708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target OnlyAira/ReadME.txt
- Size 306B
- SHA256 1f3074a0e3ae47db41ab2cf99bf49c277a54e5bac87cb2f6b133c9efb91dd9ff
- MD5 5a5313c8c6bb9de4521ade65d130c1db
- SHA1 b7c9cfd5b9d5fc4056a04dbe9a771bac2afab095
- SHA512 cb0cfef95c60484b61efe75937d2e5ba153a51edd1f26c1875ca314fd9daadb58a100c596e5f78cf2f6cc22152ecc50b9049866a167f091a73685d8857a8b2c7
- TLSH T13AE07D9770182337003E8827551C2AE0DA1A80F47A098022F590000D0225D42CBDD3F1
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.