General
- Target 09052026_0057_08052026_Πληρωμή_ATHI0.7z
- Size 1.1MB
- Sample260509-bbaswact8k
- SHA256 acf4bc4d877a689d3ff56da49c6127925898952a0b5e9c65f947c5dcca8c4479
- MD5 fd7d07dc5515f863146e4678a552279b
- SHA1 baa9579729abd065fb642b09772222aa3d557aa6
- SHA512 4fd8da124f23f41931220f2cbb1334057e01a3f93a957adc8359d1a31748218c46eb0e6926e7bd8dc63355ad57e7825b9d024c12058ca29547a71e86eea187f7
- SSDEEP 24576:KcXkM0q0fJ7ZNsn4ruCaJbwzoSi+7MMYwnch9c9tQqMsdPt19PM94rlV:KcUXq0f+nqtaJbn9+7VYDsaUdPt19PMI
- TLSH T1043533CD43ED3E52D83313A544ECB447E93A57B13AC624506EA3AB60DB12788E35BC4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
base.dll
Resource
win10v2004-20260130-en
4 signatures
300 seconds
Behavioral task
behavioral2
Sample
base.dll
Resource
win11-20260130-en
4 signatures
300 seconds
Behavioral task
behavioral3
Sample
Πληρωμή_ATHI0.exe
Resource
win10v2004-20260130-en
6 signatures
300 seconds
Malware Config
Targets
-
- Target base.dll
- Size 3.9MB
- SHA256 ae55c1fbcb28dd7619a4b123e797ab6a881eb372ee0a4bbf4e1a3adaf7e0f0fc
- MD5 7bd881344e617a490488856027f05207
- SHA1 71c898bbfbf0229e97ee54301b80de07779b2034
- SHA512 991922c22033494f3ba342025ba72853e8f2a417f4a01f9dc7a7c890057193bd3df8fbb02891925d101657d5d81d34dd4b2e60ade1ac203ed12bcf7f0b42ae49
- SSDEEP 49152:qHurAOEf+azjeLFxON/Qhek2sI3l0ZZxiD8d3gJkHLBayoWxYHH1uQQsoB:pFIBlYayoWxYHH1uQQsoB
- TLSH T1C5161A12B7B622A1C6FBC7B5D0420937D5F263E4A70503494499E549398AAFC2F6FEF0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Suspicious use of SetThreadContext
-
- Target Πληρωμή_ATHI0.exe
- Size 129KB
- SHA256 75875cbf35073ab1722ae080c1c50dae2325e189a87ec1e3e6ffb8e60d34c83e
- MD5 0e17a6290052a9e3d923b9ed9e26ce47
- SHA1 aa513a6b65ab2be1b26b7bfdf6aae2419aebb29c
- SHA512 ce0e3624bf31bae9a330900760b41e0a007fca02ee1067e9a7d661743b147924f9bedacce875135d633ea5527659063371fd69ed5d37ad643337966181f68ae5
- SSDEEP 3072:2qAxn1bF8MgbJy8RfVPeaFuDv/s16tfpEYlKARuA0SJ:2qin18JuaqvlfSYlK6QSJ
- TLSH T141D30747B69605F4D97AD2388682A707F3B2F65D03219BCB138159AA0F737E86D39780
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Formbook payload
-
Drops startup file
-
Suspicious use of SetThreadContext