General
- Target $R6YYJ25.exe
- Size 7.1MB
- Sample260831-vtp53axcqc
- SHA256 2eb4f20faee596bb421810c5078b6188b13c01b94c28b6b86e1775d49c0d2613
- MD5 ffe6c49b561cd2c8e41b4d9e0c03e858
- SHA1 d91c834d54376d8e67853ac5ce514636f939f9bd
- SHA512 f955c40569a11c224bae677e0919dbef0507d89c49cc2b3d3a279b1e5b9bb55250789cbb22eafb5cf1ae8ccf13e52520a9bc399c9c3276878230a635e7e35beb
- SSDEEP 98304:Bf7wCQInrje/CAVMJy1WctoaPBlsMjx8uNvweLODvzSey8tAJ0pAEqNCI0la1N:Bfn6/VSlcKaPBhjiYwrOMtAJ4iNCI0Yv
- TLSH T1B3763306B7839035E8604D391D52F4696E23ABAD5FE950092DBCCB5F0E7C683BE791B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
$R6YYJ25.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target $R6YYJ25.exe
- Size 7.1MB
- SHA256 2eb4f20faee596bb421810c5078b6188b13c01b94c28b6b86e1775d49c0d2613
- MD5 ffe6c49b561cd2c8e41b4d9e0c03e858
- SHA1 d91c834d54376d8e67853ac5ce514636f939f9bd
- SHA512 f955c40569a11c224bae677e0919dbef0507d89c49cc2b3d3a279b1e5b9bb55250789cbb22eafb5cf1ae8ccf13e52520a9bc399c9c3276878230a635e7e35beb
- SSDEEP 98304:Bf7wCQInrje/CAVMJy1WctoaPBlsMjx8uNvweLODvzSey8tAJ0pAEqNCI0la1N:Bfn6/VSlcKaPBhjiYwrOMtAJ4iNCI0Yv
- TLSH T1B3763306B7839035E8604D391D52F4696E23ABAD5FE950092DBCCB5F0E7C683BE791B0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.