General
- Target PsBypassCLM.exe
- Size 33KB
- Sample260930-rcqtgsteja
- SHA256 f108541ceddf15c47d0b62dfeece9c0351106d8df195aefa91dbd5ebcfb47fa7
- MD5 fd1cf647f6b883dbcacb10e143f32f82
- SHA1 6a188609b373583fe3a58e6aacb58e04cee97eab
- SHA512 bce6ea19e7a095cf7d0ff197372da1876eb9e7272a111620c57b81a21dabd7634393b7f147c62d215741995fef3c605561d0f6a910be4af9040fb29927ec9321
- SSDEEP 768:SvA/Hr0o5hoBeT94bdAVGDLCHgqG/gozD2M:SotfoBeTSemLCjGIod
- TLSH T1F8E281243AEA5019F173AF759BE471968A6FF6633B37981D009C034B4B23A41DDD1B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PsBypassCLM.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
PsBypassCLM.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target PsBypassCLM.exe
- Size 33KB
- SHA256 f108541ceddf15c47d0b62dfeece9c0351106d8df195aefa91dbd5ebcfb47fa7
- MD5 fd1cf647f6b883dbcacb10e143f32f82
- SHA1 6a188609b373583fe3a58e6aacb58e04cee97eab
- SHA512 bce6ea19e7a095cf7d0ff197372da1876eb9e7272a111620c57b81a21dabd7634393b7f147c62d215741995fef3c605561d0f6a910be4af9040fb29927ec9321
- SSDEEP 768:SvA/Hr0o5hoBeT94bdAVGDLCHgqG/gozD2M:SotfoBeTSemLCjGIod
- TLSH T1F8E281243AEA5019F173AF759BE471968A6FF6633B37981D009C034B4B23A41DDD1B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.