General
- Target 137506d8fc9105f4af573ce06bfeacdc.png
- Size 213KB
- Sample260912-2dxcrsbb24
- SHA256 482acff2ed7a1ae96ecd5dfbf0103d9e8f28813ef237e9caa9e45e674332d50d
- MD5 e81bfa114a368232c849128f083e42d9
- SHA1 c4258c4e7a7e6b8dcfbd90cfdca475f39b3eaa5b
- SHA512 77f1da5a1f40223863c5a3bfd261c2bdc2c7a12f0811ff78ec8b6035588ccfd0d558bc4f8b41c3e18e60912da51fb8f7b616f82a54826f80a36000d93d1e650f
- SSDEEP 6144:WiRWuCT+Q7i01W/dEm3sF+yRmkgfU+jQUSPNJap1wpypi:BRjppdx3U+yR10sJe1wR
- TLSH T16D242330F43BD621433A327634AE7A696585BE862F579336C99BD634D0D34C6DCC8346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
137506d8fc9105f4af573ce06bfeacdc.png
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
137506d8fc9105f4af573ce06bfeacdc.png
Resource
win11ltsc2024-20260911-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 137506d8fc9105f4af573ce06bfeacdc.png
- Size 213KB
- SHA256 482acff2ed7a1ae96ecd5dfbf0103d9e8f28813ef237e9caa9e45e674332d50d
- MD5 e81bfa114a368232c849128f083e42d9
- SHA1 c4258c4e7a7e6b8dcfbd90cfdca475f39b3eaa5b
- SHA512 77f1da5a1f40223863c5a3bfd261c2bdc2c7a12f0811ff78ec8b6035588ccfd0d558bc4f8b41c3e18e60912da51fb8f7b616f82a54826f80a36000d93d1e650f
- SSDEEP 6144:WiRWuCT+Q7i01W/dEm3sF+yRmkgfU+jQUSPNJap1wpypi:BRjppdx3U+yR10sJe1wR
- TLSH T16D242330F43BD621433A327634AE7A696585BE862F579336C99BD634D0D34C6DCC8346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.