General
- Target Main (1).exe
- Size 3.1MB
- Sample261017-gp7yesav2n
- SHA256 d57e300fdb466d508186237100cc6623a2a63c4019f0d284ebd6c6d8020b2d7d
- MD5 733a25f2b1f8419c42f4b24203194017
- SHA1 d6f642c6ed99deb357bd4d0bdc0e99b05b8297d2
- SHA512 27469cdaa8ac9ae897ee77d222b3b3dfd4fa5c31ade4c3f0aeb01edd70589b93216dbe7d3f454d78d85e65ff7ff084910ac94769bc9521a06897b762ef085510
- SSDEEP 49152:xW8Oqg+daEMumSLFvnZh8NMNNhABwR3Z2amTJ3t/Sl1SpLvLvc77Z9Jc4hl5:xBpWiOAhAqR3ZLmF3t/Fp3c73Jc4hz
- TLSH T1EEE5F03273E6C0E4E963C1F2C9219AA6EA72749113F856DB25E08E1EDF676F00977710
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Main (1).exe
Resource
win10v2004-20260911-en
4 signatures
600 seconds
Behavioral task
behavioral2
Sample
Main (1).exe
Resource
win11ltsc2024-20260911-en
15 signatures
600 seconds
Malware Config
Targets
-
- Target Main (1).exe
- Size 3.1MB
- SHA256 d57e300fdb466d508186237100cc6623a2a63c4019f0d284ebd6c6d8020b2d7d
- MD5 733a25f2b1f8419c42f4b24203194017
- SHA1 d6f642c6ed99deb357bd4d0bdc0e99b05b8297d2
- SHA512 27469cdaa8ac9ae897ee77d222b3b3dfd4fa5c31ade4c3f0aeb01edd70589b93216dbe7d3f454d78d85e65ff7ff084910ac94769bc9521a06897b762ef085510
- SSDEEP 49152:xW8Oqg+daEMumSLFvnZh8NMNNhABwR3Z2amTJ3t/Sl1SpLvLvc77Z9Jc4hl5:xBpWiOAhAqR3ZLmF3t/Fp3c73Jc4hz
- TLSH T1EEE5F03273E6C0E4E963C1F2C9219AA6EA72749113F856DB25E08E1EDF676F00977710
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger