General
- Target 7419b292f77e62623a70a50d129c225c4d26fb53282f573f4e7f57242bbf946f.exe
- Size 1.4MB
- Sample260205-tdf2sact8d
- SHA256 7419b292f77e62623a70a50d129c225c4d26fb53282f573f4e7f57242bbf946f
- MD5 01e32e7aaa7633cfc2e8868c8028b011
- SHA1 f9dc0ff0a3de6c0cd265e02e4d90f289abc44e90
- SHA512 f48c6e46fdd21346003cbccfc7e4c7b91fbac4adde67cb10da8c4e122b34cb13a650c02a004c4c6c4ab1d3eb9030c7ef88c4333a23e66bc2a5a777a68cbb0d37
- SSDEEP 24576:Y1gtfMs1hsAdBen2pqpCCnRveYepqMKDmfC4KOSSn2z6LIG8kA:7tfTfezRveYkqM3fC41p2zG3
- TLSH T13365F00913E58198F4BD9B34A27B361547F0B41BC836EFAFA38421F98D2579AA153373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7419b292f77e62623a70a50d129c225c4d26fb53282f573f4e7f57242bbf946f.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
7419b292f77e62623a70a50d129c225c4d26fb53282f573f4e7f57242bbf946f.exe
Resource
win11-20260130-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 7419b292f77e62623a70a50d129c225c4d26fb53282f573f4e7f57242bbf946f.exe
- Size 1.4MB
- SHA256 7419b292f77e62623a70a50d129c225c4d26fb53282f573f4e7f57242bbf946f
- MD5 01e32e7aaa7633cfc2e8868c8028b011
- SHA1 f9dc0ff0a3de6c0cd265e02e4d90f289abc44e90
- SHA512 f48c6e46fdd21346003cbccfc7e4c7b91fbac4adde67cb10da8c4e122b34cb13a650c02a004c4c6c4ab1d3eb9030c7ef88c4333a23e66bc2a5a777a68cbb0d37
- SSDEEP 24576:Y1gtfMs1hsAdBen2pqpCCnRveYepqMKDmfC4KOSSn2z6LIG8kA:7tfTfezRveYkqM3fC41p2zG3
- TLSH T13365F00913E58198F4BD9B34A27B361547F0B41BC836EFAFA38421F98D2579AA153373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1