General
- Target NVDisplay.Container.exe
- Size 3.6MB
- Sample260826-as16qaxwhy
- SHA256 50fb82c91d081dd54ddad8e248c85b3aa5c44180fb75c285f43c58f6351b7564
- MD5 b61836f155fc1b85662a477b27a9c125
- SHA1 a7095069ac0605095540b0a3024c45cca18c81bb
- SHA512 830037f753f999cb13d52bcd6588f67700c4a7a1313c569a0f78450be1c27dde155ff38bdf5f194730507f0ea1b6dbbfaddd379d2a69386f13f7acc4fb4371ae
- SSDEEP 49152:LYsYB4vrOQTAje1TpQgfpsoPRQ3qKVh/qNwffAj3g/bTqSk6TnXZfQ/:UFSrXTnTSJ/lgQ/6Sg
- TLSH T1FB06CF0BE3A345E8D6629178C523A353E3B2B418173187DF2BE14976EF866F05EB9701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NVDisplay.Container.exe
Resource
win10v2004-20260513-en
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
NVDisplay.Container.exe
Resource
win11ltsc2024-20260709-en
14 signatures
900 seconds
Malware Config
Targets
-
- Target NVDisplay.Container.exe
- Size 3.6MB
- SHA256 50fb82c91d081dd54ddad8e248c85b3aa5c44180fb75c285f43c58f6351b7564
- MD5 b61836f155fc1b85662a477b27a9c125
- SHA1 a7095069ac0605095540b0a3024c45cca18c81bb
- SHA512 830037f753f999cb13d52bcd6588f67700c4a7a1313c569a0f78450be1c27dde155ff38bdf5f194730507f0ea1b6dbbfaddd379d2a69386f13f7acc4fb4371ae
- SSDEEP 49152:LYsYB4vrOQTAje1TpQgfpsoPRQ3qKVh/qNwffAj3g/bTqSk6TnXZfQ/:UFSrXTnTSJ/lgQ/6Sg
- TLSH T1FB06CF0BE3A345E8D6629178C523A353E3B2B418173187DF2BE14976EF866F05EB9701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.