General
- Target d31e8b57c5db79bef00c0dd1974304c87103f97366cf11ddfe1f544b0572807e
- Size 6.5MB
- Sample261003-ptr2rsydra
- SHA256 d31e8b57c5db79bef00c0dd1974304c87103f97366cf11ddfe1f544b0572807e
- MD5 afe3310f5f2ca740ecc95d1b4a49d215
- SHA1 c185df864c23ea742599e70ef41ff84c1ffe0507
- SHA512 e4c0a67ac5808d26a0ef0337bd6f09d8a67defb6d83c78d289cdfe0604711dfafe60d4d7bd089a39aeaa3c4cf9a09ff8cc59c3941df881e40b93d0d0ccb4d9aa
- SSDEEP 49152:zvFPq9OGJG1nL6+9AdzjPD4fVbIgFgeSat1dYNBFRsvYWMIw7BcXAY+zABwlNAz3:Z0a9Wsc/7D6x+UGzjm8g2o0E0fq9a7
- TLSH T1F1666A03F19900D8D059D179CB6A9232EB71BC494BB162EF2A507BD52E76EE0BB3C750
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d31e8b57c5db79bef00c0dd1974304c87103f97366cf11ddfe1f544b0572807e.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target d31e8b57c5db79bef00c0dd1974304c87103f97366cf11ddfe1f544b0572807e
- Size 6.5MB
- SHA256 d31e8b57c5db79bef00c0dd1974304c87103f97366cf11ddfe1f544b0572807e
- MD5 afe3310f5f2ca740ecc95d1b4a49d215
- SHA1 c185df864c23ea742599e70ef41ff84c1ffe0507
- SHA512 e4c0a67ac5808d26a0ef0337bd6f09d8a67defb6d83c78d289cdfe0604711dfafe60d4d7bd089a39aeaa3c4cf9a09ff8cc59c3941df881e40b93d0d0ccb4d9aa
- SSDEEP 49152:zvFPq9OGJG1nL6+9AdzjPD4fVbIgFgeSat1dYNBFRsvYWMIw7BcXAY+zABwlNAz3:Z0a9Wsc/7D6x+UGzjm8g2o0E0fq9a7
- TLSH T1F1666A03F19900D8D059D179CB6A9232EB71BC494BB162EF2A507BD52E76EE0BB3C750
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1