General
- Target CL0P.exe
- Size 9.9MB
- Sample261110-3yf2yscf44
- SHA256 8095b27e6db252b474c4105ab786259e7f4635d95b2c978df68232a0afbc10d3
- MD5 192299cd0032ea197bf14d04adf858f2
- SHA1 74d6c4f9d5168e07aba01f2192649473ec4330ad
- SHA512 8907f230356a3d16fe586e53f4c69f8a5fde9bd870c21bf8b2d1985a705a1d7d7f93b9a21c22a1e30a4b99f2946ca519d96678d7a1ded9411438aa6a9299d254
- SSDEEP 196608:LFHGi50W8UAoMnGCxdGjP5Gi2bjKVPy2wE4/Fe8xjEQNwYCpvCLAX:JH7aW8nnGCnGjMi2bjRo4Ne8xjEkwsAX
- TLSH T1D7A63388BBC104D8E89A4339DCE69676D7E4BD310754C5CB1BE24D522E231EAFE39760
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
CL0P.exe
Resource
win11-20260911-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
CL0P.exe
Resource
win11ltsc2024-20260911-en
15 signatures
900 seconds
Malware Config
Targets
-
- Target CL0P.exe
- Size 9.9MB
- SHA256 8095b27e6db252b474c4105ab786259e7f4635d95b2c978df68232a0afbc10d3
- MD5 192299cd0032ea197bf14d04adf858f2
- SHA1 74d6c4f9d5168e07aba01f2192649473ec4330ad
- SHA512 8907f230356a3d16fe586e53f4c69f8a5fde9bd870c21bf8b2d1985a705a1d7d7f93b9a21c22a1e30a4b99f2946ca519d96678d7a1ded9411438aa6a9299d254
- SSDEEP 196608:LFHGi50W8UAoMnGCxdGjP5Gi2bjKVPy2wE4/Fe8xjEQNwYCpvCLAX:JH7aW8nnGCnGjMi2bjRo4Ne8xjEkwsAX
- TLSH T1D7A63388BBC104D8E89A4339DCE69676D7E4BD310754C5CB1BE24D522E231EAFE39760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Loads dropped DLL
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.