General
- Target d9db2231e414d4967d5b497f4de2aec2742a5895e23cb3e1ea4c347e0e715a2a
- Size 8.9MB
- Sample260905-tcsdesvthx
- SHA256 d9db2231e414d4967d5b497f4de2aec2742a5895e23cb3e1ea4c347e0e715a2a
- MD5 554ddf0a7b0af3a4a423008e0b60aa67
- SHA1 308b901858bb10ab09f4a25bc44d0ab1822b84c2
- SHA512 c566317f9d1ac02cd816c9bd3a72211d8632e1df30b8f358b010c4b0dd48ace940d5328d87b21ed609db6d268ac2771b85aa8a2416e95cf4312e489d1d866977
- SSDEEP 98304:PIBNooU1GgK+rvwkieXjg2g8Y1r3DFG4Acgmgx7aS9:PIkoUYv+7wkiEjpg8kr2cZgtaM
- TLSH T1EA964C24E601850AFCB700F79AFED95D305CB6605B2C50D361892FFEAE696E23D32593
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d9db2231e414d4967d5b497f4de2aec2742a5895e23cb3e1ea4c347e0e715a2a.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
d9db2231e414d4967d5b497f4de2aec2742a5895e23cb3e1ea4c347e0e715a2a.exe
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target d9db2231e414d4967d5b497f4de2aec2742a5895e23cb3e1ea4c347e0e715a2a
- Size 8.9MB
- SHA256 d9db2231e414d4967d5b497f4de2aec2742a5895e23cb3e1ea4c347e0e715a2a
- MD5 554ddf0a7b0af3a4a423008e0b60aa67
- SHA1 308b901858bb10ab09f4a25bc44d0ab1822b84c2
- SHA512 c566317f9d1ac02cd816c9bd3a72211d8632e1df30b8f358b010c4b0dd48ace940d5328d87b21ed609db6d268ac2771b85aa8a2416e95cf4312e489d1d866977
- SSDEEP 98304:PIBNooU1GgK+rvwkieXjg2g8Y1r3DFG4Acgmgx7aS9:PIkoUYv+7wkiEjpg8kr2cZgtaM
- TLSH T1EA964C24E601850AFCB700F79AFED95D305CB6605B2C50D361892FFEAE696E23D32593
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1