General
- Target OneDrive.exe
- Size 19.2MB
- Sample261027-pawkva1v7n
- SHA256 d44e6faaf3df358593a29faace64a071ab8de0a84c30a5232d8e9081dd668f1b
- MD5 ce8cd7ff4a20d2e54511fd473890f9ed
- SHA1 32c8e90b75f37bdaabab9e32ede708969930d501
- SHA512 7c197153dd47e66c4161c1b0cdb7ef7ca04c22748aa35d1957a051afe0b57d98ad3ff25b4c479c7c1b510f930396f0a577b445f8eedd6f0f58cb7c0ff39b4ff4
- SSDEEP 196608:5qky4MPis6BaQdPsCGxQllByuyHb/c2zZ7sNyo8d6h7mNT1VBjuP9GvainYQgSe8:9ydis5CGo3XC/cMZBo8d6hizYQgSRhv
- TLSH T1C817D047BCA045F8C19DD63089B79257BB76BC484B3227EB2B50BA742F767C06AB5700
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
OneDrive.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
OneDrive.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target OneDrive.exe
- Size 19.2MB
- SHA256 d44e6faaf3df358593a29faace64a071ab8de0a84c30a5232d8e9081dd668f1b
- MD5 ce8cd7ff4a20d2e54511fd473890f9ed
- SHA1 32c8e90b75f37bdaabab9e32ede708969930d501
- SHA512 7c197153dd47e66c4161c1b0cdb7ef7ca04c22748aa35d1957a051afe0b57d98ad3ff25b4c479c7c1b510f930396f0a577b445f8eedd6f0f58cb7c0ff39b4ff4
- SSDEEP 196608:5qky4MPis6BaQdPsCGxQllByuyHb/c2zZ7sNyo8d6h7mNT1VBjuP9GvainYQgSe8:9ydis5CGo3XC/cMZBo8d6hizYQgSRhv
- TLSH T1C817D047BCA045F8C19DD63089B79257BB76BC484B3227EB2B50BA742F767C06AB5700
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.