General
- Target Mw0MVuSaElwa.dat
- Size 246B
- Sample260827-at3qyaybmd
- SHA256 c3c1cdc5802742cfb6c03ee403c65602276ac30ed3cf52ed9c9fbf050366f13f
- MD5 7223e5725dc66a90d25c7e89df5ecf69
- SHA1 ecf8ef39bbf5ba156803a6c2521dba7f5fd1f89b
- SHA512 53863a101692462dbe14bb2b16a306e053dd700d1fb13ff7db879d10d8ae4744698ec00ed0f37a13b0926af9c8662a7e10e3eb4ebf1a8391d8fa40f64e1f5817
- TLSH T159D09781EA120461EAA997B089EF8A8800CB8CF1D96703C039DCF063827A6808210A67
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Mw0MVuSaElwa.dat
Resource
win10v2004-20260513-en
16 signatures
900 seconds
Behavioral task
behavioral2
Sample
Mw0MVuSaElwa.dat
Resource
win11ltsc2024-20260709-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target Mw0MVuSaElwa.dat
- Size 246B
- SHA256 c3c1cdc5802742cfb6c03ee403c65602276ac30ed3cf52ed9c9fbf050366f13f
- MD5 7223e5725dc66a90d25c7e89df5ecf69
- SHA1 ecf8ef39bbf5ba156803a6c2521dba7f5fd1f89b
- SHA512 53863a101692462dbe14bb2b16a306e053dd700d1fb13ff7db879d10d8ae4744698ec00ed0f37a13b0926af9c8662a7e10e3eb4ebf1a8391d8fa40f64e1f5817
- TLSH T159D09781EA120461EAA997B089EF8A8800CB8CF1D96703C039DCF063827A6808210A67
- MD5 SHA1 SHA512 TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.