General
- Target ltanalyzer_32r8.exe
- Size 72.1MB
- Sample261002-hl165stenh
- SHA256 ad7a937b404fbe4869ee34aa8470c62641f3bf7d9de7f2548ffcc9ca1787f49a
- MD5 31f6830fc97e48314f77dfb73a846255
- SHA1 1e943a900703edbfd7f74c4fee51a29e43502a3d
- SHA512 524eb8fa06dba3d9976ca95f6ba09f0104077c0240ba82f13ac27e88c0aaee10af46f9fad2ab27030bd93a8e811728aff18743e2d9d9a3e187190677558448dd
- SSDEEP 1572864:PdidNhiQU79TnoaHpGJoFmllArKPGSByTTDatcQpttD7y0/TXXjM1s:PEDkQUJLokpyoFmDArupIKDe0/TXXR
- TLSH T17AF733233245C026C566A5F1992C8ADA563C7E210B7945CB73CC3D1E8B788C6963EF5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
ltanalyzer_32r8.exe
Resource
win10v2004-20260911-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
ltanalyzer_32r8.exe
Resource
win11ltsc2024-20260911-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target ltanalyzer_32r8.exe
- Size 72.1MB
- SHA256 ad7a937b404fbe4869ee34aa8470c62641f3bf7d9de7f2548ffcc9ca1787f49a
- MD5 31f6830fc97e48314f77dfb73a846255
- SHA1 1e943a900703edbfd7f74c4fee51a29e43502a3d
- SHA512 524eb8fa06dba3d9976ca95f6ba09f0104077c0240ba82f13ac27e88c0aaee10af46f9fad2ab27030bd93a8e811728aff18743e2d9d9a3e187190677558448dd
- SSDEEP 1572864:PdidNhiQU79TnoaHpGJoFmllArKPGSByTTDatcQpttD7y0/TXXjM1s:PEDkQUJLokpyoFmDArupIKDe0/TXXR
- TLSH T17AF733233245C026C566A5F1992C8ADA563C7E210B7945CB73CC3D1E8B788C6963EF5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory