General
- Target Real Executor.exe
- Size 111.7MB
- Sample261004-3dzcsss12q
- SHA256 f02c012b21fbd9aa636afc247ff6677a6e635845bb36ab4d1e0f1b404af27fa1
- MD5 1fd7690ad52a07ac52e6406bb52db5ba
- SHA1 3a46d0c9383d961a5eef7a94aa7261fd582fe7f2
- SHA512 bf974fabfbf47a1c77d975ea8aba961361c338fcb235505f6d53d474bc071ce7207c75166f6625640ee1f7f3361a21af19a0f4a489fc23542657386ab3777974
- SSDEEP 1572864:1Pp36F/iKRz3o0EL9uXpXFxAI/MZqNrGZVOc4XIoC3MnluZQrZa:1PpIl3heuXpX/z/5NivOcC7hlTrk
- TLSH T18148F01663E111AAD577D178C7AB6203EB72B40713308BDB329C43652F73AE45E7AB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Real Executor.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Real Executor.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Real Executor.exe
- Size 111.7MB
- SHA256 f02c012b21fbd9aa636afc247ff6677a6e635845bb36ab4d1e0f1b404af27fa1
- MD5 1fd7690ad52a07ac52e6406bb52db5ba
- SHA1 3a46d0c9383d961a5eef7a94aa7261fd582fe7f2
- SHA512 bf974fabfbf47a1c77d975ea8aba961361c338fcb235505f6d53d474bc071ce7207c75166f6625640ee1f7f3361a21af19a0f4a489fc23542657386ab3777974
- SSDEEP 1572864:1Pp36F/iKRz3o0EL9uXpXFxAI/MZqNrGZVOc4XIoC3MnluZQrZa:1PpIl3heuXpX/z/5NivOcC7hlTrk
- TLSH T18148F01663E111AAD577D178C7AB6203EB72B40713308BDB329C43652F73AE45E7AB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.