General
- Target xb1usb.11059.0.140526x64.zip
- Size 2.0MB
- Sample260820-s9rmqafj2v
- SHA256 24299e58b78343d3a8a50f6b251a6604d900eb0bfcce0f42461c03371798d057
- MD5 792219a7d62e9ceae41a9a2cb2ab4583
- SHA1 7a361005aefd7e04a36e6b2f0b087bc523cd6908
- SHA512 5435ab474bf0e4f248f5e0c1329c79e1d77060a0508629d031b140cc7a94431b4ee764fa30b765466637708c3faf2f9b8bea7a6f3e3125a1019c03b3bfdceb21
- SSDEEP 49152:C4HmTRUX27+zZS5N16OzHjAFSrfSSVA8+fJ2Bb+JSwE5:zGTSlAt3rfDsB2Bb+JSw+
- TLSH T180A533FB88E1E8AD17146A32E3A3E957D00F894927F4968FCFC1B9665059213F88F171
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
xb1usb.11059.0.140526x64.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
xb1usb.11059.0.140526x64.zip
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
xb1usb.11059.0.140526x64.msi
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral4
Sample
xb1usb.11059.0.140526x64.msi
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target xb1usb.11059.0.140526x64.zip
- Size 2.0MB
- SHA256 24299e58b78343d3a8a50f6b251a6604d900eb0bfcce0f42461c03371798d057
- MD5 792219a7d62e9ceae41a9a2cb2ab4583
- SHA1 7a361005aefd7e04a36e6b2f0b087bc523cd6908
- SHA512 5435ab474bf0e4f248f5e0c1329c79e1d77060a0508629d031b140cc7a94431b4ee764fa30b765466637708c3faf2f9b8bea7a6f3e3125a1019c03b3bfdceb21
- SSDEEP 49152:C4HmTRUX27+zZS5N16OzHjAFSrfSSVA8+fJ2Bb+JSwE5:zGTSlAt3rfDsB2Bb+JSw+
- TLSH T180A533FB88E1E8AD17146A32E3A3E957D00F894927F4968FCFC1B9665059213F88F171
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target xb1usb.11059.0.140526x64.msi
- Size 2.7MB
- SHA256 0e38d565eef8ac2cdd520ee246e643d9db6f7152f3ed0b938167c29f3e6a2a00
- MD5 b9b73c5379645826903ac55bb4d26b07
- SHA1 49003d0ba26891feb2a67e588eb13313c7180cba
- SHA512 63dbc1f23cb7944033e993e07c2c6088857b7167e984bfd635f87bb65d3315efc0f88c73d4a07d73b68345e9a6136aecea827d1932dd99121d3d3d8b70686a2d
- SSDEEP 49152:o2mdRUps7+j/SXR1aKPHDAFgff08lUU+XHuJ5lph69gflG:SdSx+PbffxmXuJ5zhrl
- TLSH T15AD59E17FEB80125E1A19E7FA6729B15D1713C851730C6CB0202A6B9EDF75C68632BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory