General
- Target aa5381241d4098aedad56fbb16582b38dd3ac372368519d7ec9f52612a211f3b
- Size 743KB
- Sample260122-scte2set4e
- SHA256 aa5381241d4098aedad56fbb16582b38dd3ac372368519d7ec9f52612a211f3b
- MD5 cd3f138480d6e8ee8f8cab826781fb84
- SHA1 76b599f5a53bd9ea5017749f485ce39aef54bce2
- SHA512 9f916666034e480733ac624da6fe9a796e660e2c5c192d23704a481483c1007e5e47fdfd777448f260650416c8074b811b4d5f9ce13887f6e95f62d3f73ffb84
- SSDEEP 12288:/8Y9mNiLDSZy+tVbzAfAuoxwFsVDIMIVQG6o0kn42TiUMo0XzFArWuDeHsveMDrB:/8YQIZ+tVbzBuoxhbvWezfzarWuDeorF
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
aa5381241d4098aedad56fbb16582b38dd3ac372368519d7ec9f52612a211f3b.exe
Resource
win10v2004-20251231-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
aa5381241d4098aedad56fbb16582b38dd3ac372368519d7ec9f52612a211f3b.exe
Resource
win11-20251231-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target aa5381241d4098aedad56fbb16582b38dd3ac372368519d7ec9f52612a211f3b
- Size 1.4MB
- SHA256 23761caf7f4c6d7b3b4608c59729eb807c961deaa23aac94db5289b9b9739864
- MD5 803ca8f944dc7d7c31461376f18913f1
- SHA1 eec6babaa76e30cd25e0dc6ba851be493714f31b
- SHA512 157d85d5f5dd7eeeaee4a3bec9592287ea7413a09f3143dcaeb448720aaae268f6cd381c2d336113c9cec32b3957b0d38cafef96a71bc4f5e7f4ec0208012b0c
- SSDEEP 24576:iQ//l5ValTQ8EsGhhwIr61bTJ+OouPLsnSmKSdit6TAtUw/1dAiH0R1jDWqS:rf3r61bNdtL2Tg/AiH0R1aq
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
AmaqFinder
AmaqFinder is a loader written in Delphi, attributed to Prince of Persia, an Iranian threat group.
-
Amaqfinder family
-
Detects AmaqFinder payload