General
- Target OSForensics_v10.0.1016.exe
- Size 241.0MB
- Sample260925-xffetaxwas
- SHA256 bcab8306cc047aa32490f63f3e6c885c36160fdccec0de2cd999c88232259641
- MD5 4c136e6eadd949dd5ede2fd0dd696b2d
- SHA1 b36ad465262bdcb403835d8ef5fadac85a887666
- SHA512 8e87565d9d8e66e6939e1ed58d776b8f5ce0fd9548f620d6b0c142bf7a810e387c989d9f1c3d4868b542e2d80e1b66a77403c8dbbf30e179a94c6455966bdc75
- SSDEEP 3145728:nftTD2oRtyLMcu/qR/aCjZVMV+mThdFoaiTvPU6o7w5/VSLvWMm7YOr8k3ffwXNu:dVxqR56dILPU6J5tSLveBgWfOkMe
- TLSH T16BC8335EB2A459AEC0B69B302731460469FF7D94715F00A74BF9F18CDBB66B38C39206
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
OSForensics_v10.0.1016.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
OSForensics_v10.0.1016.exe
Resource
win10ltsc2021-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
OSForensics_v10.0.1016.exe
Resource
win11-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target OSForensics_v10.0.1016.exe
- Size 241.0MB
- SHA256 bcab8306cc047aa32490f63f3e6c885c36160fdccec0de2cd999c88232259641
- MD5 4c136e6eadd949dd5ede2fd0dd696b2d
- SHA1 b36ad465262bdcb403835d8ef5fadac85a887666
- SHA512 8e87565d9d8e66e6939e1ed58d776b8f5ce0fd9548f620d6b0c142bf7a810e387c989d9f1c3d4868b542e2d80e1b66a77403c8dbbf30e179a94c6455966bdc75
- SSDEEP 3145728:nftTD2oRtyLMcu/qR/aCjZVMV+mThdFoaiTvPU6o7w5/VSLvWMm7YOr8k3ffwXNu:dVxqR56dILPU6J5tSLveBgWfOkMe
- TLSH T16BC8335EB2A459AEC0B69B302731460469FF7D94715F00A74BF9F18CDBB66B38C39206
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.