General
- Target Axis_single.exe
- Size 9.5MB
- Sample261006-2wcfbaxv2p
- SHA256 a2deb5ac323fe67644ccfe1f1de5a31575d46ca9c97623d5e607a131a4e653c0
- MD5 9408ba7ac1e318381be345161795e063
- SHA1 c1ff286941dc9f9cbceb4552f3c7db709e595d01
- SHA512 d85897a883bf5c72e328aa4ce8b3746d48113c4d1dfcdb0928341317ccf1bf08bf16475c2abc29f864df9d2499736b2856f4018da3e26a95eb52c254b18031dd
- SSDEEP 196608:FLmWkApvgJA6jl96h3wc7BX4ZC50QKAcPJQrpSR8ilA2PYuB8Fz+M:FLmWk2vyJZq3wcFX41gcBZRfZY5F7
- TLSH T144A633AAB2ED4445F0C45E76B3E8357FAA4896EA0BF1C46F6ECC91F2B1DC69C4124443
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Axis_single.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Axis_single.exe
Resource
win11ltsc2024-20260911-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target Axis_single.exe
- Size 9.5MB
- SHA256 a2deb5ac323fe67644ccfe1f1de5a31575d46ca9c97623d5e607a131a4e653c0
- MD5 9408ba7ac1e318381be345161795e063
- SHA1 c1ff286941dc9f9cbceb4552f3c7db709e595d01
- SHA512 d85897a883bf5c72e328aa4ce8b3746d48113c4d1dfcdb0928341317ccf1bf08bf16475c2abc29f864df9d2499736b2856f4018da3e26a95eb52c254b18031dd
- SSDEEP 196608:FLmWkApvgJA6jl96h3wc7BX4ZC50QKAcPJQrpSR8ilA2PYuB8Fz+M:FLmWk2vyJZq3wcFX41gcBZRfZY5F7
- TLSH T144A633AAB2ED4445F0C45E76B3E8357FAA4896EA0BF1C46F6ECC91F2B1DC69C4124443
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory