General
- Target Oderso.7z
- Size 8.6MB
- Sample260828-2rbcfstwet
- SHA256 68a16307a5e7a64615b688a33d395b1f0ed780645a46d6ee3cfad1b921408b44
- MD5 113987adee9bdeae1540e4d9f9c3c53a
- SHA1 4b1e1b04ded2e679ee24b9be5277491dedbbf509
- SHA512 ab4d2caf4f380030adf184d2e572b4a1dd6d3d25b77b5ebbf34338deffa6db1d0ca497cda7b7b05f5c6848fcb95bcd1515d8623efb4fe293b62053f2b2ad96de
- SSDEEP 196608:U/n2n2etns6t4OGpSCE31JoTn56MvMgzvXOibz2DRppgX:kehs6jgfEfI56MvZvXOibqVngX
- TLSH T1909633A75EDBF2223C202D06D92BA731F69606122D8D2C35DB1DB727E44BCA6970473D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Oderso/1.26.4X.dll
Resource
win10v2004-20260513-en
13 signatures
900 seconds
Behavioral task
behavioral2
Sample
Oderso/1.26.4X.dll
Resource
win11ltsc2024-20260709-en
14 signatures
900 seconds
Malware Config
Targets
-
- Target Oderso/1.26.4X.dll
- Size 8.6MB
- SHA256 953a8d4196f2e023512127236f683767647953c405696e9edbc1159c2e023886
- MD5 1c327d3ff16a549fd3ae449d83c455fe
- SHA1 11871541a392da19525b8b9be94fe4952c97ff57
- SHA512 4740548ab08954c474a2fe947aa90403147de3cd20fc62bb0a7d8c466e79560667f3ae1d6ddb7557750c7b72d793eb5b249825fa20c1a5582789c11ff62ca572
- SSDEEP 49152:EeDea2ibqolOhXSworn0zSRRkVTFlr6QqwhL83Nnf9QRCTpkq8uwZQSZwnJx4+i:E77orwFEZ9hDiLx+/BbtBGQZ
- TLSH T19A96F717B31B187CD195C4B8436F69A69A2435CA0726BCFF02DA91342FAD3E07739DA4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
A potential corporate email address has been identified in the URL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.