General
- Target 615d58738825dfc72974c0946afd26f3891158ce9565a861103b2e0d35295852
- Size 65.5MB
- Sample260910-3zp19afb27
- SHA256 615d58738825dfc72974c0946afd26f3891158ce9565a861103b2e0d35295852
- MD5 8c0f7ae363ef5f19aea21f43412ef39a
- SHA1 19ae452afdf11915ebd2cb44a198ecc200aa0649
- SHA512 9d553495d37d4519b9c05ae2d8f61e56d32e6d7e1d2a7265804859e76ba050745abf28243b02a6a430fdab1629d2b4f82a64af6894fc902ea5d37ca27f748a7b
- SSDEEP 1572864:OhTkz9jziN3RxQW12PPSmiC4qG7ZfK1gtZSTDMklI1aZ3O2Q4RwEw12:O6xjeNkW1CSmr4TfK1zDHlIIZ3w4Rw38
- TLSH T1C9E73372E42A5473CD2FD2B7672BB84267213EB2279724E626D0B0BC5DFB2D045B148D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
615d58738825dfc72974c0946afd26f3891158ce9565a861103b2e0d35295852.msi
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
615d58738825dfc72974c0946afd26f3891158ce9565a861103b2e0d35295852.msi
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 615d58738825dfc72974c0946afd26f3891158ce9565a861103b2e0d35295852
- Size 65.5MB
- SHA256 615d58738825dfc72974c0946afd26f3891158ce9565a861103b2e0d35295852
- MD5 8c0f7ae363ef5f19aea21f43412ef39a
- SHA1 19ae452afdf11915ebd2cb44a198ecc200aa0649
- SHA512 9d553495d37d4519b9c05ae2d8f61e56d32e6d7e1d2a7265804859e76ba050745abf28243b02a6a430fdab1629d2b4f82a64af6894fc902ea5d37ca27f748a7b
- SSDEEP 1572864:OhTkz9jziN3RxQW12PPSmiC4qG7ZfK1gtZSTDMklI1aZ3O2Q4RwEw12:O6xjeNkW1CSmr4TfK1zDHlIIZ3w4Rw38
- TLSH T1C9E73372E42A5473CD2FD2B7672BB84267213EB2279724E626D0B0BC5DFB2D045B148D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Installer Packages
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Installer Packages
1