General
- Target Copia de pago.exe
- Size 1.2MB
- Sample260511-hjs3ract3v
- SHA256 14fb9a33ac9ff99dfb0106400ea813b3cebeb4dfa601ddd6d5a0f19a5599fb02
- MD5 e568556824e0b145e1d1d072b61b0ae1
- SHA1 daa6a7c5b3e46353968609e73a9cb475b8fa7d67
- SHA512 8a40be89ad4e264eb4497bd1022e379a46a63af11250b78a9d31488a1cb94eb05a7f860f70c3fca8fa455c2414a55ecd2040a57f59fd248bbba23de7f79eb57f
- SSDEEP 24576:DPAqhCllVkoav+HJUN0uuT7uutGf7ATY9Tu/NNGK7:zBhCn2+CqJ7If2Yp+H
- TLSH T13F55E01A4DC72BE5C16F4F74D2A5009863F0C64BA292E7FB1EDD02F4DE6274AD9170A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Copia de pago.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Copia de pago.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target Copia de pago.exe
- Size 1.2MB
- SHA256 14fb9a33ac9ff99dfb0106400ea813b3cebeb4dfa601ddd6d5a0f19a5599fb02
- MD5 e568556824e0b145e1d1d072b61b0ae1
- SHA1 daa6a7c5b3e46353968609e73a9cb475b8fa7d67
- SHA512 8a40be89ad4e264eb4497bd1022e379a46a63af11250b78a9d31488a1cb94eb05a7f860f70c3fca8fa455c2414a55ecd2040a57f59fd248bbba23de7f79eb57f
- SSDEEP 24576:DPAqhCllVkoav+HJUN0uuT7uutGf7ATY9Tu/NNGK7:zBhCn2+CqJ7If2Yp+H
- TLSH T13F55E01A4DC72BE5C16F4F74D2A5009863F0C64BA292E7FB1EDD02F4DE6274AD9170A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Suspicious use of SetThreadContext