General
- Target 0f2d252b38a6abe09f933f9daa32ce86b3b413c06d1922001c5db6fd2a1d612c
- Size 188KB
- Sample260916-x3ef2aszev
- SHA256 0f2d252b38a6abe09f933f9daa32ce86b3b413c06d1922001c5db6fd2a1d612c
- MD5 8253c98ded28a22f2fa8abe39bd42c28
- SHA1 c84cc6732cd961c8b4b2c1a48a8f06fa564f954f
- SHA512 53622312bed0b875699a5676435aa72c3ffad8f1309aae787b1fa0a21eca45bfaf9705a935085071370e6b00eaddbc928374e880532adeb1c7a001971f530c72
- SSDEEP 1536:i3i6EBXlLOUpxDhLfkcPaBK/nsp9NLMXy3i6ELa8KtaRGfsTLznkJj5GpP:RLOUpxDhrkciKnsp9NLOa8QaJvzqjO
- TLSH T169147D27F38A8A90C24625711456C6601B12FC316E9E8B9B3B91BD5F6D707828737F2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0f2d252b38a6abe09f933f9daa32ce86b3b413c06d1922001c5db6fd2a1d612c.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 0f2d252b38a6abe09f933f9daa32ce86b3b413c06d1922001c5db6fd2a1d612c
- Size 188KB
- SHA256 0f2d252b38a6abe09f933f9daa32ce86b3b413c06d1922001c5db6fd2a1d612c
- MD5 8253c98ded28a22f2fa8abe39bd42c28
- SHA1 c84cc6732cd961c8b4b2c1a48a8f06fa564f954f
- SHA512 53622312bed0b875699a5676435aa72c3ffad8f1309aae787b1fa0a21eca45bfaf9705a935085071370e6b00eaddbc928374e880532adeb1c7a001971f530c72
- SSDEEP 1536:i3i6EBXlLOUpxDhLfkcPaBK/nsp9NLMXy3i6ELa8KtaRGfsTLznkJj5GpP:RLOUpxDhrkciKnsp9NLOa8QaJvzqjO
- TLSH T169147D27F38A8A90C24625711456C6601B12FC316E9E8B9B3B91BD5F6D707828737F2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2