General
- Target file.zip
- Size 59.5MB
- Sample260915-hlg39sshkh
- SHA256 4d0b36692f572c628f2e14eb0caabf6790aa486ec28d7573a28c9d0463ec6215
- MD5 18659868a92652a7a9b1b8781b21baba
- SHA1 f661f37cee39db948e8ea3e0289f36648f89554e
- SHA512 e9c7de27f48baae60c1e1676e818309b5aa47b6b46aabeac9ba71441f0548a8d9d6e6454dc584381245224878346622d843a6aa8b91d2d6e9ae5c495e2b5a05c
- SSDEEP 1572864:wf+13RICQsGJIx1mM2PARXTbMZZrmel8gE3kqhrlxY5GxBN5XG579SmmL:wmrIG0Ix1JVRbMrrmzgEU2lxc+ZG9SmO
- TLSH T14FD733EB9458CB9AC89ED01049D83F4C5D1A06E1D0A8813FFB657BDDA0D8FC2716D2B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
README.html
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
README.html
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
UEMSAgent.msi
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral4
Sample
UEMSAgent.msi
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral5
Sample
setup.bat
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
setup.bat
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target README.html
- Size 1KB
- SHA256 02595856ad354a47e9c664a55dc428aad19ce73a00fe95228bbe590cfca944d8
- MD5 2d939d7afe37b02f77e4eb4d5e5916fc
- SHA1 7aaea8ffacef9986f3c99c9a172763fc90c71217
- SHA512 26df83433c38890b4e5bfe29b508666257b3abd562568c5fe7558925128c28d89d237420aa872db4710ef7d511b478e867751cb6426679a52554dc7b89ac948a
- TLSH T10021FEB3C2526B3AB563034E305BD6D42F12F28150545F5C72B640DAB8CA227B41B3DE
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target UEMSAgent.msi
- Size 60.3MB
- SHA256 9392dabf5b4a1d41329143c232e5130ad56e4ce1b5973372623e7982f683bbe2
- MD5 71e42f702ef3eb9906143f754ef85697
- SHA1 af484ae5b616abac8e33e8c5ca22d84252c8caed
- SHA512 a70b2b76e8a002d5a283301a64314378972724777b76dea9313ecb92b06da8a522ac7727ee2bac21f5c02faac16f2738759d7a659c74d6e646942f2f00bd36a2
- SSDEEP 1572864:kZO+GDQ9qACZ6Xbg+K+s5jZnKLY73TI2pOwAt++jlzfcj8ztlF96h1+vSK:k0PDC46Xbg4E9GYDTIvwAE6zf+aX0+vS
- TLSH T172D73323B8888136D59ED1300AB96F2D4E7E0C50877880D7E764BD6F51B5FC1A3793AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target setup.bat
- Size 2KB
- SHA256 91f784bf3dd83c0f5135ac1fd00a0fdd430720ebc57ec4c2eccb7875dbc8a90d
- MD5 9cb71612a1aa60c6a9c893bcefced81f
- SHA1 b9259cb454959dca0a42de49c5ad6f336719a384
- SHA512 3eac954bc561dd2f1ba88324acc5baaaedca2c7b3932135a6ccb7ae69b8057a8540b85a70cbd25d5b4a558254789c977bd9439ca0643b8d655a3bf802c3120eb
- TLSH T11351E0D48F112F641465CF09E46B81C3E733D0416ACA753404AC7C6F7B8D6AA3D3EAA4
- MD5 SHA1 SHA512 TLSH
Score3/10