General
- Target Cpolar.msi
- Size 10.4MB
- Sample261102-dds4cass4l
- SHA256 7289a9bf6251e784586d3144b12554ce6cf259786070f726c9bfa2773c488047
- MD5 ac616a995b239c36ee6008116177d9ef
- SHA1 f353c6529b6b964157509f760a15b3eb67b0fca6
- SHA512 dde1454bc462d9e8a17f2e589083729ef16efd677813e7c67eb1d6bd6141d326b14a806fa88254165ef47ab98d0485fe46bcd36fc797a4c8b2563c1310416cf3
- SSDEEP 196608:gJdzckJ+jdlPK/vU4wHynzppANBjswr2twy+ywtcrRxQo1k5r8q1zLR8DkoZlzB:Ccoqd5K/vUBG+YwrWwiwarRx31kF8IaH
- TLSH T1E1B6337124435F33F8BA747C71D799B96C652D5C0A0C2A7621B87F0798B8A2789E3DC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Cpolar.msi
Resource
win10v2004-20260911-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
Cpolar.msi
Resource
win11ltsc2024-20260911-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target Cpolar.msi
- Size 10.4MB
- SHA256 7289a9bf6251e784586d3144b12554ce6cf259786070f726c9bfa2773c488047
- MD5 ac616a995b239c36ee6008116177d9ef
- SHA1 f353c6529b6b964157509f760a15b3eb67b0fca6
- SHA512 dde1454bc462d9e8a17f2e589083729ef16efd677813e7c67eb1d6bd6141d326b14a806fa88254165ef47ab98d0485fe46bcd36fc797a4c8b2563c1310416cf3
- SSDEEP 196608:gJdzckJ+jdlPK/vU4wHynzppANBjswr2twy+ywtcrRxQo1k5r8q1zLR8DkoZlzB:Ccoqd5K/vUBG+YwrWwiwarRx31kF8IaH
- TLSH T1E1B6337124435F33F8BA747C71D799B96C652D5C0A0C2A7621B87F0798B8A2789E3DC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.