Resubmissions
29-10-2024 01:41
241029-b33yqssblb 1029-10-2024 01:35
241029-bzxmjssdpl 1029-10-2024 01:02
241029-bd8spasajl 1029-10-2024 00:58
241029-bb2atsyrby 1029-10-2024 00:51
241029-a7yzxayqdv 1028-10-2024 22:16
241028-163jtaydqp 1028-10-2024 21:38
241028-1hgbnsxgnb 1028-10-2024 21:34
241028-1e1wxavrfq 1028-10-2024 21:26
241028-1aah6axhjm 1028-10-2024 20:43
241028-zh16eaxbkb 10General
-
Target
TD Premium.exe
-
Size
8.2MB
-
Sample
241028-zh16eaxbkb
-
MD5
bdde1da77fd4590bcee1dc4c68a91a86
-
SHA1
8c7833a1540497c19cf312ad27522d5d0d06ff17
-
SHA256
ad8070a840554b08d3b9f1ea90fddfc1b24e8ba2637eac1e0ff44b08b169f69e
-
SHA512
a91970522d6baa724d283da429669857df6c486f65438231a1ccd0499b84644c9c1d965aff9ef80d1b63e4d39c20e007f4890288db280c83db8a105f3c5185fd
-
SSDEEP
196608:dQuyqZZjwfI9jUC2XMvH8zPjweaBpZ0cISEu2ooccXK7oSF:BvQIH2XgHq+jq283YoI
Malware Config
Targets
-
-
Target
TD Premium.exe
-
Size
8.2MB
-
MD5
bdde1da77fd4590bcee1dc4c68a91a86
-
SHA1
8c7833a1540497c19cf312ad27522d5d0d06ff17
-
SHA256
ad8070a840554b08d3b9f1ea90fddfc1b24e8ba2637eac1e0ff44b08b169f69e
-
SHA512
a91970522d6baa724d283da429669857df6c486f65438231a1ccd0499b84644c9c1d965aff9ef80d1b63e4d39c20e007f4890288db280c83db8a105f3c5185fd
-
SSDEEP
196608:dQuyqZZjwfI9jUC2XMvH8zPjweaBpZ0cISEu2ooccXK7oSF:BvQIH2XgHq+jq283YoI
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Enumerates processes with tasklist
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-