General
- Target ww1 simulator.exe
- Size 48KB
- Sample260912-t2etmaee89
- SHA256 847834a29454a3e2901d6d2c608ddf5d6316a2feb260b8e7c9512ee9d35997fe
- MD5 dd27278cbeee66110fbe8bac419681d8
- SHA1 b73f3a60480c8387ff4fdabeebf984bb858d3cc2
- SHA512 a48e24102dd50ce0445133a7af7f40a3ed64a627f24e1d142b6b20bda4f9bbe450af20c80a3dfe312903c383f143927848fcd26a8269579d462c772266c05eb2
- SSDEEP 1536:HrBr8sHy/UBTTIy8TM6xmM+J2RMYv2CwBbYe99LWQo1OgYC:HrBgyyUZTIy8TM6xmM+J2RMYVgbYKo1j
- TLSH T1F023E69CA3D84431E4BF57B21D77524893B4AE939462D79F7CC401CA2B12B99CA41EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
ww1 simulator.exe
Resource
win10v2004-20260911-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
ww1 simulator.exe
Resource
win11ltsc2024-20260911-en
13 signatures
900 seconds
Malware Config
Targets
-
- Target ww1 simulator.exe
- Size 48KB
- SHA256 847834a29454a3e2901d6d2c608ddf5d6316a2feb260b8e7c9512ee9d35997fe
- MD5 dd27278cbeee66110fbe8bac419681d8
- SHA1 b73f3a60480c8387ff4fdabeebf984bb858d3cc2
- SHA512 a48e24102dd50ce0445133a7af7f40a3ed64a627f24e1d142b6b20bda4f9bbe450af20c80a3dfe312903c383f143927848fcd26a8269579d462c772266c05eb2
- SSDEEP 1536:HrBr8sHy/UBTTIy8TM6xmM+J2RMYv2CwBbYe99LWQo1OgYC:HrBgyyUZTIy8TM6xmM+J2RMYVgbYKo1j
- TLSH T1F023E69CA3D84431E4BF57B21D77524893B4AE939462D79F7CC401CA2B12B99CA41EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects NeptuneRAT stealer
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.