General
- Target sub_2aaa916d56cf.bin
- Size 1.1MB
- Sample260524-bvwjpadv9p
- SHA256 2aaa916d56cfe95abb65fbc222bfdfa2b16a3ffb6660c1bdc211004302a1aef3
- MD5 70f3bf9c31361ebe3e39afc4f05fa160
- SHA1 0d1c448b739b18d0e277f2db264b7a6d3d957edd
- SHA512 2f1f64c8a20bc753232f7ce912f8dca36db06338df81393b95434dd5e5e60b9fd11aca3f61105eec3eb2c8bd8fd13a31d7bd6713e1e098ea251ae4511cb821f2
- SSDEEP 24576:RXwmJ5CbuufVhiKWaoqdk5Tzq47Do4yykwA5BGeudzNd:llJ4budTzqScwAWeuZNd
- TLSH T16B4523151278A38BECC763B0E2124B04D257BC370EF4194E52B5FD6CEF7A9AA9B24513
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
sub_2aaa916d56cf.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
sub_2aaa916d56cf.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
$TEMP/rdpencom_tmp/rdpencom.dll
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
$TEMP/rdpencom_tmp/rdpencom.dll
Resource
win11-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target sub_2aaa916d56cf.bin
- Size 1.1MB
- SHA256 2aaa916d56cfe95abb65fbc222bfdfa2b16a3ffb6660c1bdc211004302a1aef3
- MD5 70f3bf9c31361ebe3e39afc4f05fa160
- SHA1 0d1c448b739b18d0e277f2db264b7a6d3d957edd
- SHA512 2f1f64c8a20bc753232f7ce912f8dca36db06338df81393b95434dd5e5e60b9fd11aca3f61105eec3eb2c8bd8fd13a31d7bd6713e1e098ea251ae4511cb821f2
- SSDEEP 24576:RXwmJ5CbuufVhiKWaoqdk5Tzq47Do4yykwA5BGeudzNd:llJ4budTzqScwAWeuZNd
- TLSH T16B4523151278A38BECC763B0E2124B04D257BC370EF4194E52B5FD6CEF7A9AA9B24513
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect Blister loader x32
-
Loads dropped DLL
-
- Target $TEMP/rdpencom_tmp/rdpencom.dll
- Size 1.2MB
- SHA256 c0f3b27ae4f7db457a86a38244225cca35aa0960eb6a685ed350e99a36c32b61
- MD5 a6d49b646ed61b91bcfe9c2170b258cd
- SHA1 75c7cdddfbf538f51da8b74cbad11c302206750e
- SHA512 18be0707af33a9c4e3b9c57e7c6a3a00b0a249acf606ccb7cc0d968a722637e8bfdc4f7d09da208cd9477ef915fd019ff171df8977c55481093c35d0ccf6a2cc
- SSDEEP 24576:mDrIuOfGiDT2XNXWrdyv/z7f0LFrodrs4LK:8OfGKSBWxMfsLFVmK
- TLSH T1DC45F12236E88232D8F371B0577EB6B64AADBA941BB4A1DF124007EF9D317D01E24757
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect Blister loader x32