General
- Target № 7093 від 22 вересня 2026 р.7z
- Size 2KB
- Sample260930-m5vwpade72
- SHA256 6da94c2511b7a1b434ff973e27ff85c0079b3e639b9f8d0d706e8c5a68ef8dc3
- MD5 07250a365e9721364ef45bcc44438292
- SHA1 8612e0ccbe3170987a9b4154f12514fbd4b925ff
- SHA512 5916b8bbc88c84ddaaf02cf0f5abac0a97678d0ef422a1524ada72de728e32ef8db52311dd68a109454d6691cecb6d381a82497518d3518337714761a2177b9a
- TLSH T182514D893246AF29D417FB72533963C7ECE6384D40DAF7869946BD118CF92481F01CA9
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
№ 7093 від 22 вересня 2026 р.zip
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
№ 7093 від 22 вересня 2026 р.zip
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
№ 7093 від 22 вересня 2026 р..bat
Resource
win10v2004-20260911-en
Malware Config
Targets
-
- Target № 7093 від 22 вересня 2026 р.7z
- Size 2KB
- SHA256 6da94c2511b7a1b434ff973e27ff85c0079b3e639b9f8d0d706e8c5a68ef8dc3
- MD5 07250a365e9721364ef45bcc44438292
- SHA1 8612e0ccbe3170987a9b4154f12514fbd4b925ff
- SHA512 5916b8bbc88c84ddaaf02cf0f5abac0a97678d0ef422a1524ada72de728e32ef8db52311dd68a109454d6691cecb6d381a82497518d3518337714761a2177b9a
- TLSH T182514D893246AF29D417FB72533963C7ECE6384D40DAF7869946BD118CF92481F01CA9
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target № 7093 від 22 вересня 2026 р..bat
- Size 4KB
- SHA256 311d0910dc8bb69eae5514aff21d3411d62aa64e76de91cb916269fd1abd3901
- MD5 475e4d840fa0e674c50289793c569984
- SHA1 a5014e521ae3c0856e9f1212c6338d2af63cab03
- SHA512 73f0d6cac26377df5d8f5cf542457c4f98dd204d6e5f3a5606da749a7c94d1b52522e8425b2c23fc78993267198313406588aa7ee0e386160c27acce0868db35
- SSDEEP 96:qqc2g1oadjd6bVigiPiCn4mk6wb9Uoucpz1QB5eP5ZH0k7x1/tmxq:tc2grdqVz4GvWoucpz1QB5eP5ZH0k7Qq
- TLSH T13191A69DE21A4E0C148E1D31E0D562AAB9F6519153B0C539F2B49E603CD1FAAA0395FF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1