General
- Target odus.exe
- Size 12.1MB
- Sample260919-vnglqstdre
- SHA256 bfb6520ac9a227ee8a17f7e2255fdf521e565eaeaa879d087d3d95fdb5010f11
- MD5 a262ab57a8e09951f043fe62399857f3
- SHA1 68162ab404fe3f688e9ac00277c8679f201377e6
- SHA512 bf8bd04c30792f128bd5af924b0b4bab8f6527afe7a8c2cde32907e0edbf72f099aab1d1d87add30ad04493b340996d836ad27e705cb2cd53e15bb67ec8c201e
- SSDEEP 393216:uqdrW8eg4ldQJluIF3MnG3IaC2RQbOPbL3SOJH:uQrW8wldQt3MGw2abCik
- TLSH T1BAD63385774C08D8F84B6639C4C2D52A57A27CA207B8CBA717F81D681E8B1D8FF3A754
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
odus.exe
Resource
win10v2004-20260911-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
odus.exe
Resource
win11ltsc2024-20260911-en
15 signatures
900 seconds
Malware Config
Targets
-
- Target odus.exe
- Size 12.1MB
- SHA256 bfb6520ac9a227ee8a17f7e2255fdf521e565eaeaa879d087d3d95fdb5010f11
- MD5 a262ab57a8e09951f043fe62399857f3
- SHA1 68162ab404fe3f688e9ac00277c8679f201377e6
- SHA512 bf8bd04c30792f128bd5af924b0b4bab8f6527afe7a8c2cde32907e0edbf72f099aab1d1d87add30ad04493b340996d836ad27e705cb2cd53e15bb67ec8c201e
- SSDEEP 393216:uqdrW8eg4ldQJluIF3MnG3IaC2RQbOPbL3SOJH:uQrW8wldQt3MGw2abCik
- TLSH T1BAD63385774C08D8F84B6639C4C2D52A57A27CA207B8CBA717F81D681E8B1D8FF3A754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.