General
- Target c5b0fcd55c10f3f30f2f9dc840c96ef7dc4f7160cbe2c6c33b0d73f3267e9de4
- Size 1.1MB
- Sample260826-kbftkavfjg
- SHA256 c5b0fcd55c10f3f30f2f9dc840c96ef7dc4f7160cbe2c6c33b0d73f3267e9de4
- MD5 3e89f795c83d3ab0ef9912b5d0ea1b85
- SHA1 47e250852d30c2ff6c82de55d4d49c699aa72600
- SHA512 7292d2b56069393ec68b105205bb43ef4b4060b89ecab76f5298e962d073285b55e420f3e342bf658f05a6dffe57a3193a6d0ff52aaef14cc15e7ae0ccd81c0e
- SSDEEP 3072:ELOUpX29Jvv4z4Ysp9NLf3aOT3lH78aADz8EyBG89:sFivwz4vxpzLBG89
- TLSH T1D135ABF8EF91989BCC6813B3C9DE43E42371E4A95B0A879B124D3A3F2DD71D12D51688
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c5b0fcd55c10f3f30f2f9dc840c96ef7dc4f7160cbe2c6c33b0d73f3267e9de4.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target c5b0fcd55c10f3f30f2f9dc840c96ef7dc4f7160cbe2c6c33b0d73f3267e9de4
- Size 1.1MB
- SHA256 c5b0fcd55c10f3f30f2f9dc840c96ef7dc4f7160cbe2c6c33b0d73f3267e9de4
- MD5 3e89f795c83d3ab0ef9912b5d0ea1b85
- SHA1 47e250852d30c2ff6c82de55d4d49c699aa72600
- SHA512 7292d2b56069393ec68b105205bb43ef4b4060b89ecab76f5298e962d073285b55e420f3e342bf658f05a6dffe57a3193a6d0ff52aaef14cc15e7ae0ccd81c0e
- SSDEEP 3072:ELOUpX29Jvv4z4Ysp9NLf3aOT3lH78aADz8EyBG89:sFivwz4vxpzLBG89
- TLSH T1D135ABF8EF91989BCC6813B3C9DE43E42371E4A95B0A879B124D3A3F2DD71D12D51688
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2