e47870d0bc0fdb73aac513f4a415f9d784d38e8065ad1ebfc8d51b5be7645f86 | Triage™

Login
Reports

Overview

overview

6

Static

static

1

MB_W166_Pa...XL.zip

windows10-2004-x64

1

MB_W166_Pa...XL.zip

windows11-ltsc_2024-x64

1

art/sound/...D.json

windows10-2004-x64

3

art/sound/...D.json

windows11-ltsc_2024-x64

3

art/sound/...D.json

windows10-2004-x64

3

art/sound/...D.json

windows11-ltsc_2024-x64

3

art/sound/...D.json

windows10-2004-x64

3

art/sound/...D.json

windows11-ltsc_2024-x64

3

art/sound/...D.json

windows10-2004-x64

3

art/sound/...D.json

windows11-ltsc_2024-x64

3

art/sound/...D.json

windows10-2004-x64

3

art/sound/...D.json

windows11-ltsc_2024-x64

3

art/sound/...D.json

windows10-2004-x64

3

art/sound/...D.json

windows11-ltsc_2024-x64

3

art/sound/...D.json

windows10-2004-x64

3

art/sound/...D.json

windows11-ltsc_2024-x64

3

art/sound/...D.json

windows10-2004-x64

3

art/sound/...D.json

windows11-ltsc_2024-x64

3

art/sound/...D.json

windows10-2004-x64

3

art/sound/...D.json

windows11-ltsc_2024-x64

3

art/sound/...D.json

windows10-2004-x64

3

art/sound/...D.json

windows11-ltsc_2024-x64

3

art/sound/...60.wav

windows10-2004-x64

6

art/sound/...60.wav

windows11-ltsc_2024-x64

1

art/sound/...28.wav

windows10-2004-x64

6

art/sound/...28.wav

windows11-ltsc_2024-x64

1

art/sound/...30.wav

windows10-2004-x64

6

art/sound/...30.wav

windows11-ltsc_2024-x64

1

art/sound/...64.wav

windows10-2004-x64

6

art/sound/...64.wav

windows11-ltsc_2024-x64

1

art/sound/...56.wav

windows10-2004-x64

6

art/sound/...56.wav

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
MB_W166_Parovoz_1PXL.zip
Size 390.6MB
Sample261107-mpdmgacv2k
SHA256 e47870d0bc0fdb73aac513f4a415f9d784d38e8065ad1ebfc8d51b5be7645f86
MD5 f68e87cce4f417e1bba80a124ca822c3
SHA1 51c5a0a2ab0c27a878570fb14b99704f350eff61
SHA512 a488f7c31dce8c7d2bab4b86f62c5e96f11fd71ed6628e60a37f68dfba4a12a339e9e85cf0ed32edbbd598ac955ab98b513ce0d828b4a52aca73607c5a93e67d
SSDEEP 6291456:14l9jTJvekCppylYE0sJeVByuKF9kEdL7sqOd4ccQP7Zt3R7zGL6QYVamrh4FBK:1ATJvhCPyl3082CpdEEQPFt3xBVDhb
TLSH
T19819338AE260D423D3D3B23F46B18EC4A2C85431E8996DE5F45733D1177A4E8D93ABC6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Static task

static1

Behavioral task

behavioral1

Sample

MB_W166_Parovoz_1PXL.zip

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

MB_W166_Parovoz_1PXL.zip

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

art/sound/blends/V8_AMG_M157_engine.sfxBlend2D.json

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

art/sound/blends/V8_AMG_M157_engine.sfxBlend2D.json

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

art/sound/blends/V8_AMG_M157_exhaust.sfxBlend2D.json

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

art/sound/blends/V8_AMG_M157_exhaust.sfxBlend2D.json

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

art/sound/blends/m272_ENG.sfxBlend2D.json

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

art/sound/blends/m272_ENG.sfxBlend2D.json

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

art/sound/blends/m272_EXH.sfxBlend2D.json

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

art/sound/blends/m272_EXH.sfxBlend2D.json

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

art/sound/blends/ml556.2_eng.sfxBlend2D.json

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

art/sound/blends/ml556.2_eng.sfxBlend2D.json

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

art/sound/blends/ml556.2_exh.sfxBlend2D.json

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

art/sound/blends/ml556.2_exh.sfxBlend2D.json

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

art/sound/blends/om629_diesel_ENG.sfxBlend2D.json

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

art/sound/blends/om629_diesel_ENG.sfxBlend2D.json

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

art/sound/blends/om629_diesel_EXH.sfxBlend2D.json

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

art/sound/blends/om629_diesel_EXH.sfxBlend2D.json

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

art/sound/blends/om642_diesel.sfxBlend2D.json

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

art/sound/blends/om642_diesel.sfxBlend2D.json

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

art/sound/blends/om642_diesel_exh.sfxBlend2D.json

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

art/sound/blends/om642_diesel_exh.sfxBlend2D.json

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

art/sound/engine/AMG_M157/EngB_00760.wav

Resource

win10v2004-20260911-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral24

Sample

art/sound/engine/AMG_M157/EngB_00760.wav

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral25

Sample

art/sound/engine/AMG_M157/EngB_01428.wav

Resource

win10v2004-20260911-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral26

Sample

art/sound/engine/AMG_M157/EngB_01428.wav

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral27

Sample

art/sound/engine/AMG_M157/EngB_02130.wav

Resource

win10v2004-20260911-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral28

Sample

art/sound/engine/AMG_M157/EngB_02130.wav

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral29

Sample

art/sound/engine/AMG_M157/EngB_03164.wav

Resource

win10v2004-20260911-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral30

Sample

art/sound/engine/AMG_M157/EngB_03164.wav

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral31

Sample

art/sound/engine/AMG_M157/EngB_04256.wav

Resource

win10v2004-20260911-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral32

Sample

art/sound/engine/AMG_M157/EngB_04256.wav

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  MB_W166_Parovoz_1PXL.zip
- Size 390.6MB
- SHA256 e47870d0bc0fdb73aac513f4a415f9d784d38e8065ad1ebfc8d51b5be7645f86
- MD5 f68e87cce4f417e1bba80a124ca822c3
- SHA1 51c5a0a2ab0c27a878570fb14b99704f350eff61
- SHA512 a488f7c31dce8c7d2bab4b86f62c5e96f11fd71ed6628e60a37f68dfba4a12a339e9e85cf0ed32edbbd598ac955ab98b513ce0d828b4a52aca73607c5a93e67d
- SSDEEP 6291456:14l9jTJvekCppylYE0sJeVByuKF9kEdL7sqOd4ccQP7Zt3R7zGL6QYVamrh4FBK:1ATJvhCPyl3082CpdEEQPFt3xBVDhb
- TLSH
  T19819338AE260D423D3D3B23F46B18EC4A2C85431E8996DE5F45733D1177A4E8D93ABC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  art/sound/blends/V8_AMG_M157_engine.sfxBlend2D.json
- Size 1KB
- SHA256 8764a4c800e5784a1b835fb18db7ce5b06114271136d0b49eb2890e6b6439f66
- MD5 5dab3f799da942d4da5997c45b256a92
- SHA1 3a31cfda5764dbdcb3f722e33cd428ec69eaa7d1
- SHA512 fa14d5a13cf880c606464d1ac8d9457363a7e785a193f6ae621f460934fa1003c49ca65e655b67c460f17b9acb0093fd07f97d76db1d34c4728556cc3bcdb507
- TLSH
  T19311D010E1C8CAAD1A8D3B7FF1974785082C655B3A98D649B0FFA8063F3C529E974E44
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  art/sound/blends/V8_AMG_M157_exhaust.sfxBlend2D.json
- Size 1KB
- SHA256 b0533f84174d571bc201525a5da5c3409ee80324b913552d316fe97001858478
- MD5 f12ec6f1c0335d514e3db22cb5066718
- SHA1 34f850258c7adb249cb0ca474a1b41d6975559b3
- SHA512 9da6a186914abfbe89711830d41ab0552f9301d7a40eda93235ac7618ded16cc6950d00ba75ba66e405d052d87b10794edb22efc1c6fbafd477d4e1e04bb060b
- TLSH
  T1E621EB20E1C4CA6C19C8776AD76E0B820824A11BB599D6C970EF6C422F3C426EEB5F06
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  art/sound/blends/m272_ENG.sfxBlend2D.json
- Size 3KB
- SHA256 9c1586ca5cfe25505a292ccb5c4dbdbbbfe467d8be9815dd8d03ac3665ac014d
- MD5 d8bf582d276e9eab422c04af2fdf1f20
- SHA1 16986b103d81abe3de6b5dff13729be5b818f5d8
- SHA512 0c37cc995191ea52b8eebf8e9187e132d7621c2824b265b78f56f4ca38ec65e4199631c92eb95691fdae4d61d1697908e20a2e2cf7f53bf42bfb6e21dec0a774
- TLSH
  T1EC718A53E2C9DD8C383C1759DE6137315592590B3E1CEB0BBE9C28423BBD02A6639E2C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  art/sound/blends/m272_EXH.sfxBlend2D.json
- Size 3KB
- SHA256 a398b3bea7b89f0f6fb72f5a09e1edcbc09b558d67972cb761963ac380b186f1
- MD5 47480c35f1ac70bbcde58a9fd72dbb78
- SHA1 ea54e22fcd1237c93c7fb723d8a3405518b66f0e
- SHA512 451123c7a3968d2ddcd2c32714abad211f142fcfd8c2ecd3bb87cda8be0d7ec63182c063e458c9d1cca00806704b5091a4af680ba3503e7bdb16d98ab385e272
- TLSH
  T13981BD52E2C19D842D3C131DCD63370968A9941B3B1CDF2ABDDD38225F7D03966B5E2A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  art/sound/blends/ml556.2_eng.sfxBlend2D.json
- Size 1KB
- SHA256 14d4f0a49515bbb24259491fb52d6b6b3f15f25ebab5c209174828d48ec83b28
- MD5 7f7b99b49ae63be3b54b33e9162455ef
- SHA1 edc2e54cf29b4ff6e3eee8f24d92b825311acbb5
- SHA512 494b2e7777825eb566643f91c363797ed757d3d8a1c53816e7b66639575aa661597818c993b01be8bcd7ae091f7f5830286617069e9bec9d732fdae3ae6d9a40
- TLSH
  T149314D30FFC4EC743D886392D75E874A12A5D40B7B2DD90B78E4284A376C0529939F1C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  art/sound/blends/ml556.2_exh.sfxBlend2D.json
- Size 1KB
- SHA256 05fff42908fba3125558a59f78faa4d249424467fd60c8bdd93b632dd8709d89
- MD5 f6cb99da84a02a92fe30f32dedd6b811
- SHA1 ef3f8dee761cf2dfb7610f749702d8f4a65012ba
- SHA512 2e7e2f2b716eab25f58d0e2f6bc040bdebe817651b20fe9b997c76fbe5253b8bc5519be3fa37f4a40a348133f00dda36826101c5c48bf213c491d7c91ae9bf19
- TLSH
  T11631D634D7C0ECB63C08536AC6AE675924A5D4073E5CC60BB5EF698E375C416A92CF1C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  art/sound/blends/om629_diesel_ENG.sfxBlend2D.json
- Size 1KB
- SHA256 98279c07ec838a72d8a2ef4a698fee204e8127f29fc2c732cf89b0691de474a5
- MD5 f23d7352b9dc82bb46caf8d82285fc28
- SHA1 b68035a0817722566d0b0e81a1dd0088bf7570b5
- SHA512 cdece95202319e65148372710aeae9badc55c1749d423e2cfa6e7b14b55627ba226ef2eb890ccfceae636984d161965824359c59c052365cb71a368497d96b4a
- TLSH
  T19521AA63F7C86C974A4A13B0EE846B8B6119050F69EEC60AB4DC5C923B6D5067C38F4D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  art/sound/blends/om629_diesel_EXH.sfxBlend2D.json
- Size 1KB
- SHA256 49f74eb8d7cd7155f16f6680c6e7dd99163925075b530ba07b217c3b85f0cfa3
- MD5 249c35673a43d0d77c1d165a4360ff3a
- SHA1 1768aaa4ed827d3fb1378604dc42ce8a28872ab1
- SHA512 11718d5612676f5c0d955b1b0ea6784854cd98f7fbef9b51bd9708a67433e1d98d54eaa05962bf42ce853ee313e0e760d1679a115de317a4c75cb5e7b152098b
- TLSH
  T1AA213C1EEBC9D8464ECE13B4FE94278B1109044AA5EEE647B4DD5DD29B6D8037C38F06
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  art/sound/blends/om642_diesel.sfxBlend2D.json
- Size 2KB
- SHA256 dc75dbd19416dc540e9681f6705437bf5576a199a644dce8fe5fc90873fe915b
- MD5 6cc9269d730da5ec14dbf0293f0e9f48
- SHA1 5ecd5b478251fc66e4c956011456aa68beb26561
- SHA512 7e116dee8f1e01ccd16bc85ac940eeafcc8381d2fba24420428598544ac7869e0dd6a1b73868075032becf14a5217b3225d61acb57811db32c5acd46de13c43e
- TLSH
  T1CA510761E7C49C542C4C2371A9912B8240595C87BBABBA1B79DC2DC79B1C136F93AE38
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  art/sound/blends/om642_diesel_exh.sfxBlend2D.json
- Size 4KB
- SHA256 74e762449537b0e0fafa4f58ad4bba9fc70ff8fc3f168a06238b7649370a9111
- MD5 7f244470a1fee5543c9016ba010476b1
- SHA1 a06024f8e967363053e306fb08a460211132e8a3
- SHA512 a8b2ce017fce36c31fa5ce26ee0a4ccaa729fc5e974480516c2f36eaedb5b3598167cde1342ac2d196949d3cc576d20aff767f3608de9169fbd838b3b8762f32
- SSDEEP 96:+YDXLXzgXNXiKKLHb0IUDXLXzgXNXiKKLHb0I3:VDXLXzgXNXiKKLHb0IUDXLXzgXNXiKKP
- TLSH
  T10D91CC319BA5584A3C3C037CEDB96645E8445AABA9DF8C8738FC1CE5DF78426B8C0909
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  art/sound/engine/AMG_M157/EngB_00760.wav
- Size 86KB
- SHA256 c707c16cd3c864aa29ce26980ee8c1e9b6289dcc9f147c81424170a074dac593
- MD5 8c531848e3a318bd740ae9ae0f3b8836
- SHA1 e28d7443d3b248cda86c2a81f2a1429bd9e6bfd5
- SHA512 e1761b57180d784ba950fed40f703dae14f399be2bd46b8673a6a75e1dd7b1bb58f3a14537ade29c4145dcaa57b4aa0a8c59f32b9dade547c3a2f1f251c71bcf
- SSDEEP 1536:wnbTTBiYwddgB9EutvttV2Y1gPufmAmxxWQ9PKuaYRjnzfLT2bYcJMfblk2JvlOI:wnbHBiYwTkd92vVxWQ9PKZYNT2bYTfbf
- TLSH
  T1C983025F6956053EFA3389FB4C217090CCFE765D2DEA9849B78D80675E2848C2CBEC85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23 behavioral24
- Target
  art/sound/engine/AMG_M157/EngB_01428.wav
- Size 60KB
- SHA256 116d92536dd830a524f67b794e55a77eba3b97a36312c6fb0235657425c4d1e9
- MD5 ce9b34a086c1eabb1d69c70c9a9032b2
- SHA1 dc29b6bfe074eccb9d8a1574d39c78fbecf26b6d
- SHA512 f0cf99633f352cb7e580fae112b0576ee693e126a9930fa31391136ba4fd776d4cda1377b07c6af26c437e4b73735f858dfcec13e22bde544b0d3ae5c03c33bf
- SSDEEP 1536:Q/UNTk6hrarcAvuwt3VPzAdym+abZDLCp:QcNTAIAvbVLoCp
- TLSH
  T1D053029D3F08842EE9E2D5906CC92EDDAE1FFD3BEE0825D78708E44150ED87426C246C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral25 behavioral26
- Target
  art/sound/engine/AMG_M157/EngB_02130.wav
- Size 57KB
- SHA256 d8ef9cc75cb7ccabb517388cfee66461bcf2051be37c8a4af7e7755175abce4a
- MD5 2fe530c7df009d1288aff35572383fd4
- SHA1 8d635ef71fc957fc29c3ef469632ec054c7603df
- SHA512 f5ddffd2077ea74e429eab0cc43ee7f95b93ba5715c69fca49d2b44a1da09f77ddf674672a10b4e456eb0f87ccdb07a17ad713bccbb8657650f7a9b389f7af07
- SSDEEP 1536:y+Mb1BZcnXe1LJclTeFdbSMlBg+Ep/xaG5eQQzCY:bSieFITeFFSMD7Ep/w+ext
- TLSH
  T18143022ECA2DD89392E103C95C14A3ECDC284D6D884211BFB767E6D04CD999F7CA10D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral27 behavioral28
- Target
  art/sound/engine/AMG_M157/EngB_03164.wav
- Size 58KB
- SHA256 45474ecb036e1350dc6f877f5380380a721dfcffc581b9358103df94d0b18992
- MD5 eca089d692a27f9182ead0a3e573bec0
- SHA1 098117abe3e9e1ff50f4589c89e6fc79a6277e1c
- SHA512 48e5c12418e6461e25ec734d030b607a2fdc13ba7caacb80ec6985296503d65139d08d8c831c30f6d35f039343df47f5470b247235be958979b54b15a18ee6aa
- SSDEEP 1536:kot0D1gVql6i0bidAvuoKUkAG1JAD/lxTvOv2xG:kot0D1g66i0bidAGooJEO
- TLSH
  T1DC43F1F9F393C61649E30DE5E60942E4337A5451646E9E930F87D84B4C9F13BAAAF830
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral29 behavioral30
- Target
  art/sound/engine/AMG_M157/EngB_04256.wav
- Size 50KB
- SHA256 43cf05883c0242e9b012e49e8f4953f1a224a255c081719e26d2a66d23660d0e
- MD5 59cef8127fb954a6559d28425197d9ea
- SHA1 3c27e65f38d370f7ae65d3b0ced1fd74378a0cd1
- SHA512 1227d8121c2a711bbb17a874eb8c86073872159bfaea3330b3dee0f7f15ca4e9c5ddd49ee94f7b383b8f466734d0ce5fff34477319dfeb1a320cdfb7feecd9c8
- SSDEEP 768:Kb+NcGevpItGurFpQ8+h7EN2E0dBaCbl+uko+zLKzie69vhdWKuv8x:mGeRIXXQf7EN2EeB3lXtmFWg
- TLSH
  T16A33F1A832C529D65D33E0B669AD48513CF499088D6C4D27B30C973F399C46E68C39FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy