General
- Target TikTokGiftDisplay.zip
- Size 80.5MB
- Sample260823-b3crjsdm2y
- SHA256 376c829b35cf105e2309340771d891cc926645530cb6d85ab46c9c2b9c73bb01
- MD5 a02dfac3cbff551e44928ba1b29d38f8
- SHA1 9ad47559c6da969482c78718b62d9467d637e0c0
- SHA512 0cd5aa4fd3a9634a4795619bbf382c57788f940b84ec1079908ae6a2ea5e888ef97a190e3655b2c1eedd78a89a433496316825befbece9dec97a25efd6d9ff4f
- SSDEEP 1572864:vXXO19h4bCzBLi4n6u62TwGAmYXMV5TTCjDZTF24tcHMEY/e6HR7q/:PGeCzMHu6FmYXcijDZTE2C/HV
- TLSH T1FD083361F984A3F2D533921E1E246E2470367464A3CD1BDB92BC9389386E3894D797CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
TikTokGiftDisplay.exe
Resource
win10v2004-20260513-en
4 signatures
900 seconds
Behavioral task
behavioral2
Sample
TikTokGiftDisplay.exe
Resource
win11ltsc2024-20260709-en
17 signatures
900 seconds
Malware Config
Targets
-
- Target TikTokGiftDisplay.exe
- Size 80.8MB
- SHA256 360bc60a5633cc7cb280ce1b7f85ff06e2923c5b64a2f957b4a06f2b32752722
- MD5 b161e866c8494950108f615d025767dd
- SHA1 1a92d346abb85a592c51ab0d5039f994f3bb3c58
- SHA512 c67ced0f8ca42e59184ef72fb373ee30efe046f2269e1377e328627e3afe34257b1e9f5f3223e1cf1bafa69e9a9b475d71fe01701edca5171eae4e323dc6e5f1
- SSDEEP 1572864:vXJVMvoAJ4pUgOY3No95+RMaa4OIOwE1FP+SLrxTRCQ5UedVPhThxP:Ev54igL3N6QLTOIOwOHLrxTwYPH
- TLSH T19B083361F59083F2F5A3823D1674AA25B436B4B0638997DB02F8814A3C7B746097DBDF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.