General
- Target madium-mcp.exe
- Size 1.3MB
- Sample260907-xrebws11fv
- SHA256 f0447ce2324b99a68d1d5cd8984fed4e7d2f551703436de88a1ed8a769e93bad
- MD5 a1560a4a1de9c2ac72080109b9939922
- SHA1 9d7d7d6e36712e7f726d430b884a2ed29b1fdb25
- SHA512 34499132ae3cd84df594a6e24fc8f47a67c84da9d78eef81e5e1232da3e838b8ce4f35a40b3caef5f282ab177fddb5d020bbb67a93ec712f612c3c37ebab30ac
- SSDEEP 12288:hiPnHDsBcqCGckjn9qsOW/D3a1wBvVfJJyVf+D2zBlbUxxQR5T:hiPHDsBVTckjcWbq1wffJMVf+D2zD
- TLSH T1B9551955BA532E77C06A8070920B40532534708B1B197DAB75DC906C2F9EABFAB3F76C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
madium-mcp.exe
Resource
win10ltsc2021-20260513-en
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
madium-mcp.exe
Resource
win11ltsc2024-20260709-en
14 signatures
900 seconds
Malware Config
Targets
-
- Target madium-mcp.exe
- Size 1.3MB
- SHA256 f0447ce2324b99a68d1d5cd8984fed4e7d2f551703436de88a1ed8a769e93bad
- MD5 a1560a4a1de9c2ac72080109b9939922
- SHA1 9d7d7d6e36712e7f726d430b884a2ed29b1fdb25
- SHA512 34499132ae3cd84df594a6e24fc8f47a67c84da9d78eef81e5e1232da3e838b8ce4f35a40b3caef5f282ab177fddb5d020bbb67a93ec712f612c3c37ebab30ac
- SSDEEP 12288:hiPnHDsBcqCGckjn9qsOW/D3a1wBvVfJJyVf+D2zBlbUxxQR5T:hiPHDsBVTckjcWbq1wffJMVf+D2zD
- TLSH T1B9551955BA532E77C06A8070920B40532534708B1B197DAB75DC906C2F9EABFAB3F76C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.