General
- Target agent.exe
- Size 4.9MB
- Sample261020-2z3rnsys5j
- SHA256 3bdaf55db10e85e07642227ca10c1bc7534a9e609a1087d7beefc5d9854d7400
- MD5 aec51e9526c6e3d322f89c44f5adb154
- SHA1 c4d8450dd330df6ef3a4e1c3629e72e90de291e7
- SHA512 56eadac92d7f806ded1a5a43c2ed05a022dc4abfb3950bc5da0215a4cfa6ef06a5d710f256a5679ae3bc7a319f72913380a16c7ef44d9edf914da1e2dc68cae1
- SSDEEP 98304:8j6zP0ytvrashWaHrrS78VVmBVYeRMRH/dsTIcLurIyP:8j6oyZckK78VuVYQ6FsTzSrL
- TLSH T11236120BE29254FCC12BD03987ABA772B971B80902347E6B5B50DF723F60B50976DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent.exe
Resource
win11ltsc2024-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target agent.exe
- Size 4.9MB
- SHA256 3bdaf55db10e85e07642227ca10c1bc7534a9e609a1087d7beefc5d9854d7400
- MD5 aec51e9526c6e3d322f89c44f5adb154
- SHA1 c4d8450dd330df6ef3a4e1c3629e72e90de291e7
- SHA512 56eadac92d7f806ded1a5a43c2ed05a022dc4abfb3950bc5da0215a4cfa6ef06a5d710f256a5679ae3bc7a319f72913380a16c7ef44d9edf914da1e2dc68cae1
- SSDEEP 98304:8j6zP0ytvrashWaHrrS78VVmBVYeRMRH/dsTIcLurIyP:8j6oyZckK78VuVYQ6FsTzSrL
- TLSH T11236120BE29254FCC12BD03987ABA772B971B80902347E6B5B50DF723F60B50976DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory