General
- Target freeRAM.exe
- Size 14.4MB
- Sample261023-kgavhace49
- SHA256 cf4145246235311c8f4d003e0da6beb75d6d44bb8d79c6337500897eadee3d8e
- MD5 a8b71508a0de1f57c0260d9d43f37dcd
- SHA1 88925225803e6d32625b42907d0d9bda9e8cd0d3
- SHA512 ebaf0a636c9ab971c52278c4c83b4601ff6b12aa404fc6b48f84124cb157f27c1216bd6cc634f371e1ff38784c6497b581c98146b319ed65ac31f46855d46f87
- SSDEEP 98304:xz1Q5d3uJHIRK+Wp74ZOWCk3qYCFFVhlcl9Xr3gzDz5PDE815v2Twvb8q/ow5:xueJHI8+WpfWzHCXVhlcl9Xr3gzDz5P3
- TLSH T108E64D8733E7ADBBC8D157766ADB63345712FC224E1B4BE7768A832C84476845E06F20
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
freeRAM.exe
Resource
win10v2004-20260911-en
10 signatures
900 seconds
Behavioral task
behavioral2
Sample
freeRAM.exe
Resource
win11ltsc2024-20260911-en
14 signatures
900 seconds
Malware Config
Targets
-
- Target freeRAM.exe
- Size 14.4MB
- SHA256 cf4145246235311c8f4d003e0da6beb75d6d44bb8d79c6337500897eadee3d8e
- MD5 a8b71508a0de1f57c0260d9d43f37dcd
- SHA1 88925225803e6d32625b42907d0d9bda9e8cd0d3
- SHA512 ebaf0a636c9ab971c52278c4c83b4601ff6b12aa404fc6b48f84124cb157f27c1216bd6cc634f371e1ff38784c6497b581c98146b319ed65ac31f46855d46f87
- SSDEEP 98304:xz1Q5d3uJHIRK+Wp74ZOWCk3qYCFFVhlcl9Xr3gzDz5PDE815v2Twvb8q/ow5:xueJHI8+WpfWzHCXVhlcl9Xr3gzDz5P3
- TLSH T108E64D8733E7ADBBC8D157766ADB63345712FC224E1B4BE7768A832C84476845E06F20
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.