General
- Target Add_or_Remove_Cast_to_Device.zip
- Size 1KB
- Sample261030-q4e1macw8y
- SHA256 27c056e6a3e84b682f820f1e481900ba887c05ab24da5a26d4b7d54696a1e7cd
- MD5 42207242315718002a183e32866f0f9a
- SHA1 25c3525d0cb261488f835dbb4c2197ceb72433c9
- SHA512 44128a4feb1097c4e49403eadf714ff8e5aa7527466c673f29e6b1f123818244b0216ebdf8f4962e9a0753d46f92771f172d052f5143112547afa1a86231827d
- TLSH T17A3141854A1B2991D7836F39080F3B20B7AAD58CD8015A17DF69F24A6DCEBA55BC330C
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Add Cast to Device context menu.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Add Cast to Device context menu.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Remove Cast to Device context menu.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Remove Cast to Device context menu.bat
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target Add Cast to Device context menu.bat
- Size 192B
- SHA256 4ab97f967226df8264b2c15e2d60d1d560d806bac8c411f0c067d55c895f6e41
- MD5 1beae4ccecd34c1d4b821b4a184c95da
- SHA1 ff1d3643999d54cdfefef365397631c5e4504116
- SHA512 9c67324546d85a77ad25abd687cdc7c028de3f8529fc67ab52b7800f7972a9eda8ba4fb20defc6f61c3b1af3a150c4ecaa3b1f4ff3bb44db8bf3eb03b1b57598
- TLSH T147C0C0910A7F4008A1B07949EC8C42F3B32AC33BF8CB5604B05232345513186C0F8BCF
- MD5 SHA1 SHA512 TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Remove Cast to Device context menu.bat
- Size 219B
- SHA256 3766b4067ad7f1d526d959f7d3ab1f9c5d9b1fed0fe83bf21b02074e922e95e3
- MD5 ad9aae0639478d66d772379c23ac9ca5
- SHA1 b5f8edf055cff0e007e0f513bf4d0f0c26e15ee9
- SHA512 46a62dac104cf8b5035338b32449471576bd9c0628485bcf1a2504ecf054de9861306ca8a9b16786a7fbf3d9bd13d10183c8672e517ca930e85d3e163048a250
- TLSH T1C3D0234044BF5004D070B8188F8801F9E315C21FF4CA05007181323C1003389C0B06CB
- MD5 SHA1 SHA512 TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.