General
- Target REBOOTEDSPOOFER.exe
- Size 37.1MB
- Sample260910-zdk9dsx1bt
- SHA256 d745bf18dfe5ff1e1d9c2d3f7abc4ed89edb0bb40bc4d1f8b1d2e5762521b586
- MD5 0921788a9e5c18859809eb6e87230034
- SHA1 a205e2828d09ec86990d6027bba0fb859e67ddc9
- SHA512 be3c70a7cdee633ad89690d53c9cff98ff378445ea573cb09072091d964b2c6a67a1c1a60afd20d816ced9eac74f3a1b2a8457fff7c3246c3fbcbfba6f9463ad
- SSDEEP 786432:a3XHgLgpXtUWkTKOaYvXPwbxGxAkVUp5CZ1qbgZT:a3Xgw7kTnaYPPwgx1Up5+qEZ
- TLSH T1C78723DFA2E677A4C0C34608564E50CB25C164BEC6FE892C3DCB5D037465DAA8A8DE73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
REBOOTEDSPOOFER.exe
Resource
win10v2004-20260513-en
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
REBOOTEDSPOOFER.exe
Resource
win11ltsc2024-20260709-en
14 signatures
900 seconds
Malware Config
Targets
-
- Target REBOOTEDSPOOFER.exe
- Size 37.1MB
- SHA256 d745bf18dfe5ff1e1d9c2d3f7abc4ed89edb0bb40bc4d1f8b1d2e5762521b586
- MD5 0921788a9e5c18859809eb6e87230034
- SHA1 a205e2828d09ec86990d6027bba0fb859e67ddc9
- SHA512 be3c70a7cdee633ad89690d53c9cff98ff378445ea573cb09072091d964b2c6a67a1c1a60afd20d816ced9eac74f3a1b2a8457fff7c3246c3fbcbfba6f9463ad
- SSDEEP 786432:a3XHgLgpXtUWkTKOaYvXPwbxGxAkVUp5CZ1qbgZT:a3Xgw7kTnaYPPwgx1Up5+qEZ
- TLSH T1C78723DFA2E677A4C0C34608564E50CB25C164BEC6FE892C3DCB5D037465DAA8A8DE73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.