General
- Target HMW.exe
- Size 1.3MB
- Sample260822-msyf2stbrg
- SHA256 33d272ff75527f59369140018cac30a9c8fb24c176084e2f6536aa78f919c5bc
- MD5 9df067a541a29e692e63b81aa1f89e02
- SHA1 aaeb8743c179671e50ef5365ceab98409ae7e1fe
- SHA512 38ab02453e1e461e316fc1963ab55c2ef72fb4c9b494d77fab4148af80405fd7b25b1d4d55b700b0a48e853c6c86cbb86a3a0bb548149b9e94020e37f02198fe
- SSDEEP 24576:krORE29TTVx8aBRd1h1orq+GWE0Jc5bDTj1Vyv9TvagOGhb7/e:k2EYTb8atv1orq+pEiSDTj1VyvBaUh
- TLSH T1DD553B06636471B9FFF6F27A8526F9D6F6F47C0501E2891E07A3BE7A2E32320651D211
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
HMW.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
HMW.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target HMW.exe
- Size 1.3MB
- SHA256 33d272ff75527f59369140018cac30a9c8fb24c176084e2f6536aa78f919c5bc
- MD5 9df067a541a29e692e63b81aa1f89e02
- SHA1 aaeb8743c179671e50ef5365ceab98409ae7e1fe
- SHA512 38ab02453e1e461e316fc1963ab55c2ef72fb4c9b494d77fab4148af80405fd7b25b1d4d55b700b0a48e853c6c86cbb86a3a0bb548149b9e94020e37f02198fe
- SSDEEP 24576:krORE29TTVx8aBRd1h1orq+GWE0Jc5bDTj1Vyv9TvagOGhb7/e:k2EYTb8atv1orq+pEiSDTj1VyvBaUh
- TLSH T1DD553B06636471B9FFF6F27A8526F9D6F6F47C0501E2891E07A3BE7A2E32320651D211
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.