General
- Target spf.exe
- Size 19.5MB
- Sample261113-grnybsf18x
- SHA256 a55f0e7b1096999edfc10382cc9bae7da8cdd632a9c56ad77afb328bf68ecb2c
- MD5 98f9201e89f9a090ee6758d1948bb1de
- SHA1 47cbdf953c171adadd144bb608403c916cb1b40e
- SHA512 3bf284185afb350ed6f2774f0bcfd88d78b153e3c271732c434c531ac4cf05a58413d0920226b49ffbd4675564b4f2e633a7edfdad3b6a3d7a54532fbc633b04
- SSDEEP 393216:ImUkltvnZBqln1M1uhoLe/5vnIHPFdMiiCl+4FmkcW34gXJfMp1+HHa:Iglt/6ln1iuhf/wbViCl+vWIgfMp1wHa
- TLSH T1A42723D791D867F4C383C689955B03C7B2C0259BDBEB49193ACA9C027692C9A034BF77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
spf.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
spf.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target spf.exe
- Size 19.5MB
- SHA256 a55f0e7b1096999edfc10382cc9bae7da8cdd632a9c56ad77afb328bf68ecb2c
- MD5 98f9201e89f9a090ee6758d1948bb1de
- SHA1 47cbdf953c171adadd144bb608403c916cb1b40e
- SHA512 3bf284185afb350ed6f2774f0bcfd88d78b153e3c271732c434c531ac4cf05a58413d0920226b49ffbd4675564b4f2e633a7edfdad3b6a3d7a54532fbc633b04
- SSDEEP 393216:ImUkltvnZBqln1M1uhoLe/5vnIHPFdMiiCl+4FmkcW34gXJfMp1+HHa:Iglt/6ln1iuhf/wbViCl+vWIgfMp1wHa
- TLSH T1A42723D791D867F4C383C689955B03C7B2C0259BDBEB49193ACA9C027692C9A034BF77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Loads dropped DLL
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Defense Evasion
Debugger Evasion
1Direct Volume Access
1Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1