General
- Target navi.exe
- Size 120.0MB
- Sample260912-ncd8xaae42
- SHA256 24d1119ea2009cbfbcd5f8fd2f5896d4a003c7834c80d16493850184ddf212ec
- MD5 97622da51a612241a6dca27a43164d78
- SHA1 af007023cb122ed754d9203b1798525dcdb4c3b4
- SHA512 15e40ff09453e486255c022b0e810a7f97554838bb5c9d127ac5ea778a4ca81c95b5a3b915c6f85e2249f307c46f10843d1671f36677e6af819be975e3accfd8
- SSDEEP 3145728:lfSv7ig9NXtJEQlLgaR55oR/E0/kd0xmIfPlAZ22b:O7t9htJn3R0FEPaq7
- TLSH T1325833D1BE4701FFF5D6923964529C1AB4D130EA976BC3FB02E451A32E172C07E34AA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
navi.exe
Resource
win10ltsc2021-20260911-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
navi.exe
Resource
win11ltsc2024-20260911-en
3 signatures
900 seconds
Behavioral task
behavioral3
Sample
temp.pyc
Resource
win10ltsc2021-20260911-en
4 signatures
900 seconds
Behavioral task
behavioral4
Sample
temp.pyc
Resource
win11ltsc2024-20260911-en
13 signatures
900 seconds
Malware Config
Targets
-
- Target navi.exe
- Size 120.0MB
- SHA256 24d1119ea2009cbfbcd5f8fd2f5896d4a003c7834c80d16493850184ddf212ec
- MD5 97622da51a612241a6dca27a43164d78
- SHA1 af007023cb122ed754d9203b1798525dcdb4c3b4
- SHA512 15e40ff09453e486255c022b0e810a7f97554838bb5c9d127ac5ea778a4ca81c95b5a3b915c6f85e2249f307c46f10843d1671f36677e6af819be975e3accfd8
- SSDEEP 3145728:lfSv7ig9NXtJEQlLgaR55oR/E0/kd0xmIfPlAZ22b:O7t9htJn3R0FEPaq7
- TLSH T1325833D1BE4701FFF5D6923964529C1AB4D130EA976BC3FB02E451A32E172C07E34AA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target temp.pyc
- Size 138KB
- SHA256 7cd94f14f6814d4e34660eaf26687d3bfede6c65fcfd94fd4861de7aced0aaef
- MD5 86ae93d3bcf489e72c712ba3d4354db3
- SHA1 7200f897c18009baf20b1272fdec430ae9f4d5c3
- SHA512 9b63cbbe1154c54ce3b6f23ff9c915da137a5ad68023fee6301a77abdb9e7206783f76be5bac7b71d207cc9f2f6c5b9c3d1be00008030f86f0a78ae1542596c4
- SSDEEP 1536:GFRgec33JtC4qUOekUAS/hw/7/jOCWMxonjoRpkcaNn+95Qn5bhbEQzr2HZv0EoC:GBA3JtCsGpSo9xLv15Qnx92HZ8BhA
- TLSH T1F0D339B9A8359863EED8BD75B0D69A91B3224142B600DB47F41C4CF83FD931ACA9573C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.