General
- Target RedengineCrack.exe
- Size 76.4MB
- Sample260508-xhqcssgs7p
- SHA256 15d4cacd7b09cfd4924df466797eae005cae3720a48f66190c7b211fcd28775d
- MD5 d025e205582a8d46af95192e67cd5dc2
- SHA1 6b328ec26fe0a6e184ed36923c4547cae9bcb5b4
- SHA512 e9aea6bfe46787d6c32ce9e83d86d91a46b34a40ffe279662acb0588fb9069d05546b1db7b391cb1e4ace2d825d7c1fa54611f4f4384ee412e1cd34e61f5d53f
- SSDEEP 1572864:3jSjW6Kh3P3R8fNknAnZ2yOogqTcaNH21A/QNNGK4C2GPDWa+Me+uB:3gtKh/h8fNknAnIdA7lxQ4pGPDWau+W
- TLSH T16708339A3F8021C5F5DEA27B1088C8176EB1F748175B445B57B81C372F672E2A97EA30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
RedengineCrack.exe
Resource
win10ltsc2021-20260126-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
RedengineCrack.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
bot.pyc
Resource
win10ltsc2021-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
bot.pyc
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target RedengineCrack.exe
- Size 76.4MB
- SHA256 15d4cacd7b09cfd4924df466797eae005cae3720a48f66190c7b211fcd28775d
- MD5 d025e205582a8d46af95192e67cd5dc2
- SHA1 6b328ec26fe0a6e184ed36923c4547cae9bcb5b4
- SHA512 e9aea6bfe46787d6c32ce9e83d86d91a46b34a40ffe279662acb0588fb9069d05546b1db7b391cb1e4ace2d825d7c1fa54611f4f4384ee412e1cd34e61f5d53f
- SSDEEP 1572864:3jSjW6Kh3P3R8fNknAnZ2yOogqTcaNH21A/QNNGK4C2GPDWa+Me+uB:3gtKh/h8fNknAnIdA7lxQ4pGPDWau+W
- TLSH T16708339A3F8021C5F5DEA27B1088C8176EB1F748175B445B57B81C372F672E2A97EA30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target bot.pyc
- Size 23KB
- SHA256 e1dc5c7a3495b2f5b73d02c855352965c4762866e01f3d2965a7fe4d672849df
- MD5 c8cd503bf4380f103fcdd366250e0329
- SHA1 7025ae9c9d530c407e82366dcfb508a6ef41fcbc
- SHA512 7afaeb16cecdfd7e232a03c1198e8b2782a64e0038b702451d09b43a6169ee9a0c4a7c6cd33d8c8e9bf05fcb143186fb84320d2bd08c8cb4f10e71a556f55acd
- SSDEEP 384:aJWL1Zj47o/nQ0AxDD800gB6g2Ygf0yyl:z1xco/nQ0ADZ6g2YJl
- TLSH T1E4B2C6E2B5024122FF5DEC72C4C18B94BF1E6A82BF10C2E3355F62AD5FD66B0E984214
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10