General
- Target coordsfinder-windows-x86_64.exe
- Size 7.1MB
- Sample260826-2kscdsxdrd
- SHA256 fa35d09be81a025c9284050370b486419537dc9fb0e700bc60f0b780dce09620
- MD5 98bd8631728b7c2e63be52d23b7a90e5
- SHA1 e90bfe8e653502337bf519c9694d127f4c0e7e1d
- SHA512 b63dc55d458322cc551936a7806f59c48455ef81db3575544bf93884a8f8c9597ad2c643102e5898e036fd8574b38c9030889618be5e93d8275027de03c4529b
- SSDEEP 49152:YJNlXC1ixTyTK0rk3NegJLhYYKq84I7xDNFF+OhIi6d17Ichlro5dzH43twjiejF:8b4mB1EFgFXbbjMbQtc0zMhOeEC3n
- TLSH T1657618157A5AA5ACC06AC474834A4A73AA3134CB0B39B8FF44D552793FB9EF41F3C618
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
coordsfinder-windows-x86_64.exe
Resource
win10v2004-20260513-en
0 signatures
600 seconds
Behavioral task
behavioral2
Sample
coordsfinder-windows-x86_64.exe
Resource
win11ltsc2024-20260709-en
14 signatures
600 seconds
Malware Config
Targets
-
- Target coordsfinder-windows-x86_64.exe
- Size 7.1MB
- SHA256 fa35d09be81a025c9284050370b486419537dc9fb0e700bc60f0b780dce09620
- MD5 98bd8631728b7c2e63be52d23b7a90e5
- SHA1 e90bfe8e653502337bf519c9694d127f4c0e7e1d
- SHA512 b63dc55d458322cc551936a7806f59c48455ef81db3575544bf93884a8f8c9597ad2c643102e5898e036fd8574b38c9030889618be5e93d8275027de03c4529b
- SSDEEP 49152:YJNlXC1ixTyTK0rk3NegJLhYYKq84I7xDNFF+OhIi6d17Ichlro5dzH43twjiejF:8b4mB1EFgFXbbjMbQtc0zMhOeEC3n
- TLSH T1657618157A5AA5ACC06AC474834A4A73AA3134CB0B39B8FF44D552793FB9EF41F3C618
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.