General
- Target Step on my pc.zip
- Size 28.9MB
- Sample260507-2j96tabt7s
- SHA256 4e147fe44adb82980191441d8b6f2799725e17304c6cabebd31e57f98374ee9c
- MD5 872773300f4a346d0eed58e4d0154ed1
- SHA1 417d48ff0bc1f1ac0da13590ad8f97873b688dfe
- SHA512 281c820d5082784efa32467e08d3c02235584a4d861a897793dc656e8db5449b3b20d36c20d3ff0d6746cf9e97395de739db94f8e159c708255b7348187ac97a
- SSDEEP 786432:xwfgwILE8iJzo36UqYg6/GgPiPWGJyJzQ9YhQz:xwoyzo3eonOGJzQIQz
- TLSH T1FA6733548A84D4A4F0336CF36AB26755D3AD057E1DC456FF17B33260BBABEE4229C821
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Step on my pc/Step on my pc.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Step on my pc/Step on my pc.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Step on my pc/Step on my pc.exe
- Size 65.6MB
- SHA256 a6438b41a9ad8aee18e8a385275182c70fe68b0a30c4df693194ed78ee85181c
- MD5 ebb9df2a9fdee5964d1edf23803d7f3f
- SHA1 767763a326f23e782af901b2bc9b5a57f98d8c04
- SHA512 7a030117da36a58f111d1703a1f39a23e2582ba8d0b1ed706c55359b3264c013ac26887ef9b16874219817af253aba7d875be322341bc7917aa5a54f859f31f0
- SSDEEP 393216:0KxapWfk4suIRsknJMvIGv4OoVAMCCnlZ14ow+glb/vE5L5OtsFo/5NTaNNd4AJm:+4guRkQ4O4AlvhUV5OtsFctaf4
- TLSH T18CE7AF15B3D80A06E63FC27DC2638112E6F1B4931352C7CF0559EA992F53BC1AB7B266
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables Task Manager via registry modification
-
Drops startup file
-
Executes dropped EXE
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.