592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/09/2026, 18:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
Size 1.7MB
Sample260922-wl9eeacb43
SHA256 592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3
MD5 3be7d0a33622dbfead5a675a90d1ebfd
SHA1 eb6546e7e17513a9b2b9f8d8bafcc9775d3bf20c
SHA512 9a653476e26952816ebaa88958b89cf4d0f76a6612139a1ef066dc72870a95776905cb3ab0a6ba34dabbc24cd0f146a91b671c96780eeab346b42d503b948cae
SSDEEP 24576:7cvN8WuR8mvUn0RN9oe4meM5loC+R+uPfJAHhI+4FA0bLUw:7c11mc0RnSmqXiHhI+/0b4w
TLSH
T1FD852843F66690FCC069C075930A6633BE32BC8D4B2576FB5AD44B312E65FA06A3CB15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\A:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\J:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\M:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\O:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\X:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\Z:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\G:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\K:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\L:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\N:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\Q:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\R:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\S:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\W:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\I:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\P:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\U:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\V:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\Y:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\B:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\D:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\H:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
File opened (read-only)	\??\T:	592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe

C:\Users\Admin\AppData\Local\Temp\592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe
"C:\Users\Admin\AppData\Local\Temp\592627c6d8f01519d9a88923db6fab9d65314ac0a9c43b2d75da8882995042b3.exe"
1⤵
- Enumerates connected drives
PID:2444

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads