General
- Target Loader (1).exe
- Size 15.9MB
- Sample260831-v7a83axeqe
- SHA256 3f74ac824d8d6fcc32b7b857620ad5c367d5f20a0b1d453b393f411645cf1eae
- MD5 da0332fd5b39b73b6e62df3a902a1345
- SHA1 f2dbc748134b5885515666e7d9a16b460975be22
- SHA512 48257bc4927f13f0fd207bbfc2ea55d7abb73d4fe41b8bdb3befa06349a9bf0b2784e75cd5946c99ddbd035fe447181019d3b18c948003c02135e44afaf94116
- SSDEEP 393216:w8FwF5cj1HdroN9XQ/oL2zmtEYPPDBpEDnDA:w87jF9oN9XQoCzmioNp6DA
- TLSH T1B4F623C7D5ED9BE8D58317705C8223CB28D8706A4AA5946936CF1C03B425DAE42CEFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Loader (1).exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Loader (1).exe
- Size 15.9MB
- SHA256 3f74ac824d8d6fcc32b7b857620ad5c367d5f20a0b1d453b393f411645cf1eae
- MD5 da0332fd5b39b73b6e62df3a902a1345
- SHA1 f2dbc748134b5885515666e7d9a16b460975be22
- SHA512 48257bc4927f13f0fd207bbfc2ea55d7abb73d4fe41b8bdb3befa06349a9bf0b2784e75cd5946c99ddbd035fe447181019d3b18c948003c02135e44afaf94116
- SSDEEP 393216:w8FwF5cj1HdroN9XQ/oL2zmtEYPPDBpEDnDA:w87jF9oN9XQoCzmioNp6DA
- TLSH T1B4F623C7D5ED9BE8D58317705C8223CB28D8706A4AA5946936CF1C03B425DAE42CEFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1