General
- Target jaffacakes118_11637459606.zip
- Size 13KB
- Sample261002-mkph6sxalg
- SHA256 9ba7adf980e55bd5e84da9763180fadf366f8a239ae3f391d8840eeec0548168
- MD5 f6a3135293a666b2f30d58e39ca303c9
- SHA1 db225c6f69f5f8c359d024c0f07d747288c748be
- SHA512 9e6bfca7d6d5dd7f8feacda84d2f6bbd1c2a7298b66ad9e50f294189a0ad32bc7c526792f36942a1de973faaaa61d535eeeb6f123d1ea1f2fab0dbddecbb1172
- SSDEEP 384:LozJn/F/bgdXhSeZZRvBlvjUbmyW8f/Rfe0WD:8dn/FTgdRpZR3wb1S
- TLSH T14C52BF436EAC247CE5326C3637D582908A48849D337E582F6D101733AFBA1A158BCADD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
9a693393fc1a64524c267a50b5719671a6a975cb5965e362ec4cfe5d8a4c44e9.ps1
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
9a693393fc1a64524c267a50b5719671a6a975cb5965e362ec4cfe5d8a4c44e9.ps1
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Language
-
ps1
Deobfuscated
Source
URLs
-
exe.dropper
https://raw.githubusercontent.com/blueclouds8666/uTox_XP/files/binaries/0.17.2/utox-i686.exe
Targets
-
- Target 9a693393fc1a64524c267a50b5719671a6a975cb5965e362ec4cfe5d8a4c44e9
- Size 22KB
- SHA256 9a693393fc1a64524c267a50b5719671a6a975cb5965e362ec4cfe5d8a4c44e9
- MD5 d8f90eb2b9f308c18859806132273935
- SHA1 3a192c59216553139f1406c5e974e43389c91f5d
- SHA512 5426a36149cf8413c6e681e63dbe54e556d3aa9d1cef79e8868c0013ae1a261be5b576385ddff13d7eed7c4fab3c5983af8a14791cd7e1144b244e0221508247
- SSDEEP 384:eakWV+othN7XVEHTwTxRPfIJJmmRyMANGjR3OF59UY4q6RtjrKO4D:kWV+oHNpEH0FdfYJm8VV3u9LBxD
- TLSH T1EDA28CB4225BFD8B254A490CD44E1418ED5E537F92AC0F04E5CDA1B7BEB82509DACFAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.