General
- Target 2026-10-02_1da1637e2c89c8762a964dfe65cef0c9_mespinoza
- Size 1.4MB
- Sample261003-ttserasdkc
- SHA256 c7e62aba49f5639d82a308336dc964c40308837cd0ded5336b991778ab0b109b
- MD5 1da1637e2c89c8762a964dfe65cef0c9
- SHA1 624f65ab26d5d5a4e91a60e17ba1d655f3388e4c
- SHA512 4882747005e943d23410a60051179715161818d68a90820f1c04e29a6b0dca95ecac9c44437f5ea4da7e7c43c6d95d09120b8c3ae488ef8da9f265c850e94a71
- SSDEEP 12288:FVthxbitwzL1PAXruYyVHHaf4HJ1jwssawsUoN9PqIf:FbAw9PiQnDJGaz9
- TLSH T13B65016FB7B544E2E21AC279C99AE661E371FC956C20A30F2750A31F2F376706D24721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_1da1637e2c89c8762a964dfe65cef0c9_mespinoza.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_1da1637e2c89c8762a964dfe65cef0c9_mespinoza
- Size 1.4MB
- SHA256 c7e62aba49f5639d82a308336dc964c40308837cd0ded5336b991778ab0b109b
- MD5 1da1637e2c89c8762a964dfe65cef0c9
- SHA1 624f65ab26d5d5a4e91a60e17ba1d655f3388e4c
- SHA512 4882747005e943d23410a60051179715161818d68a90820f1c04e29a6b0dca95ecac9c44437f5ea4da7e7c43c6d95d09120b8c3ae488ef8da9f265c850e94a71
- SSDEEP 12288:FVthxbitwzL1PAXruYyVHHaf4HJ1jwssawsUoN9PqIf:FbAw9PiQnDJGaz9
- TLSH T13B65016FB7B544E2E21AC279C99AE661E371FC956C20A30F2750A31F2F376706D24721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1