General
- Target Xfer.Records.Serum.v2.1.2.update.rar
- Size 10.1MB
- Sample260423-ythb1agz6x
- SHA256 c4621ba2ca0816e2f8da391c9e088187b4ce65b7f828eac06a36af381ff802aa
- MD5 75c4fe57e952d071df5ee8293ae358ab
- SHA1 0fbc70771fcea6c74d7cc77831796de5f2680c51
- SHA512 a1a35239dda1df5c34c75bb24f89e4127c3798fc6ebb483f9a95918a531bd52475ca2272ba836c69384af2e00c459eb8a1d994d80fa6d57b13b3a136d8072cfc
- SSDEEP 196608:57BZKaTsv6sYXBWp0Sd6BgEY9EkgAYkx0S9vmW1UQm2hk40fbQEA:lBZJT+6sYRWpXDENArx0SBFm2m7bVA
- TLSH T116B6231BB25F653DD45A5A318573C2205A3B7F62A4328D2F46F43D0DEF264880E3B6B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Xfer.Records.Serum.v2.1.2.update.rar
Resource
win10v2004-20260130-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
Xfer.Records.Serum.v2.1.2.update.rar
Resource
win11-20260130-en
12 signatures
900 seconds
Behavioral task
behavioral3
Sample
VR.nfo
Resource
win10v2004-20260130-en
3 signatures
900 seconds
Behavioral task
behavioral4
Sample
VR.nfo
Resource
win11-20260130-en
3 signatures
900 seconds
Behavioral task
behavioral5
Sample
Xfer Records Serum v2.1.2 update.exe
Resource
win10v2004-20260130-en
6 signatures
900 seconds
Malware Config
Targets
-
- Target Xfer.Records.Serum.v2.1.2.update.rar
- Size 10.1MB
- SHA256 c4621ba2ca0816e2f8da391c9e088187b4ce65b7f828eac06a36af381ff802aa
- MD5 75c4fe57e952d071df5ee8293ae358ab
- SHA1 0fbc70771fcea6c74d7cc77831796de5f2680c51
- SHA512 a1a35239dda1df5c34c75bb24f89e4127c3798fc6ebb483f9a95918a531bd52475ca2272ba836c69384af2e00c459eb8a1d994d80fa6d57b13b3a136d8072cfc
- SSDEEP 196608:57BZKaTsv6sYXBWp0Sd6BgEY9EkgAYkx0S9vmW1UQm2hk40fbQEA:lBZJT+6sYRWpXDENArx0SBFm2m7bVA
- TLSH T116B6231BB25F653DD45A5A318573C2205A3B7F62A4328D2F46F43D0DEF264880E3B6B6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
- Target VR.nfo
- Size 150B
- SHA256 f2e130b068314c6c7ada451686c10468d4d5c3ee84ba9601b8e78f6c8eb3568f
- MD5 b1666903f072ebf1d1f6ffc2e0fd8939
- SHA1 2c5891de82fafeed572e7c3ea418c39ef86a73d2
- SHA512 85dccad908eca86e573c910604b301df10c7b30cff0619afca436be353c5dfab4640d4ae6934a04f5479edf3a38aef62456a0df0361ce36418751e878dacb237
- TLSH T1A7C08CA14AFFDA80952192F02032B028F8018406F369C581A8446240B141812AA0841C
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target Xfer Records Serum v2.1.2 update.exe
- Size 10.0MB
- SHA256 e6fc0c64f1fd7ddb4f0236fa73f0bd44b3c6d2739f9714ceeabbee26df0db57a
- MD5 5a5dd8bc24de9bcf35d7ceef93c7b237
- SHA1 83698f61ce3348d0426fd5add5ff1442e6dad881
- SHA512 3b6ab9e7ada728dd4b3abbb3edcbd89e49d180adfb6f65e59f84c5d02ab6fa93984cfce8531a4af01ec159cf952382f8daade975c9e62ac53fe541fdbdd52dda
- SSDEEP 196608:e7BZKaTsv6sYXBWp0Sd6BgEY9EkgAYkx0S9vmW1UQm2hk40fbQO:mBZJT+6sYRWpXDENArx0SBFm2m7bx
- TLSH T115B6235BB25F613DD45A1A318573C2205A3B7F62A4328D2F46F43D0DEF224884E3B6B6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE