General
- Target Vortex-Bootstrapper.exe
- Size 14.6MB
- Sample260820-ten4sa1alb
- SHA256 4ac1c40118de6166bece58b04ec937c4b9975a5541e4ea96eba9d7ba87a48d33
- MD5 b098024d0c8dbba834f76bb49c62e2b0
- SHA1 1b01ec9117032f9a37c46d130e988304467595f5
- SHA512 b8fa33248851d4262acb14868faeff569d77c37f05f1d739a1b8b42f9865679b6b585a1c14b69cfcc9a40bee17332ff7b86064ad4b9ff6f80e5bd6249a7757e1
- SSDEEP 393216:WJsYIdRMOzHN+jg9yD4ty9TPRuUrzQLOW/Ki/8lZG3:6udRMOxQGyDtDRuUrzUChlQ3
- TLSH T182F623C3A1DE87EDD48396156A4712CAA4C5B056DAFA17143ECE0D0EFE06C4907CBBB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Vortex-Bootstrapper.exe
Resource
win10ltsc2021-20260513-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target Vortex-Bootstrapper.exe
- Size 14.6MB
- SHA256 4ac1c40118de6166bece58b04ec937c4b9975a5541e4ea96eba9d7ba87a48d33
- MD5 b098024d0c8dbba834f76bb49c62e2b0
- SHA1 1b01ec9117032f9a37c46d130e988304467595f5
- SHA512 b8fa33248851d4262acb14868faeff569d77c37f05f1d739a1b8b42f9865679b6b585a1c14b69cfcc9a40bee17332ff7b86064ad4b9ff6f80e5bd6249a7757e1
- SSDEEP 393216:WJsYIdRMOzHN+jg9yD4ty9TPRuUrzQLOW/Ki/8lZG3:6udRMOxQGyDtDRuUrzUChlQ3
- TLSH T182F623C3A1DE87EDD48396156A4712CAA4C5B056DAFA17143ECE0D0EFE06C4907CBBB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger