General
- Target DT NAmacro.exe
- Size 657KB
- Sample261107-txm97ses2p
- SHA256 2163be7094566c80ea69bd7705aa11437fcfb358f3bd2534c1fea06d5b069ac4
- MD5 d4d00d52681e5475616818fbca12a0d1
- SHA1 9365f9f13ca62ef4f0c49ea0c870cf4ba0c4ca21
- SHA512 cafa3d7c40766fd0ba45862c43ab39560095f5a928b1175d7d2218d179b63540b4fcd9edd89ce4b227a736fe4b27cb358c03afc8880b36d2dfe14a809fc40275
- SSDEEP 12288:EgyBTANERKBWoW+4NU+jgauulTNrep8akndjbmpuxs0hpmS0Mg/6cnRzSgdF:HyB0NEUWoWzNUjuHrgidHMehpC/fRzS
- TLSH T106E40224227C067ACB7C8BBC58708690537C291FB56EDB5D36613CDCEAD2BE30654A93
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
DT NAmacro.exe
Resource
win10v2004-20260911-en
15 signatures
900 seconds
Malware Config
Targets
-
- Target DT NAmacro.exe
- Size 657KB
- SHA256 2163be7094566c80ea69bd7705aa11437fcfb358f3bd2534c1fea06d5b069ac4
- MD5 d4d00d52681e5475616818fbca12a0d1
- SHA1 9365f9f13ca62ef4f0c49ea0c870cf4ba0c4ca21
- SHA512 cafa3d7c40766fd0ba45862c43ab39560095f5a928b1175d7d2218d179b63540b4fcd9edd89ce4b227a736fe4b27cb358c03afc8880b36d2dfe14a809fc40275
- SSDEEP 12288:EgyBTANERKBWoW+4NU+jgauulTNrep8akndjbmpuxs0hpmS0Mg/6cnRzSgdF:HyB0NEUWoWzNUjuHrgidHMehpC/fRzS
- TLSH T106E40224227C067ACB7C8BBC58708690537C291FB56EDB5D36613CDCEAD2BE30654A93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.