General
- Target 7a7f5a9fe72d80ff53a1f2c6af50d022d49695e29e423b76e318d264f3b0dd14.bin
- Size 1.4MB
- Sample260525-xee3naex4j
- SHA256 7a7f5a9fe72d80ff53a1f2c6af50d022d49695e29e423b76e318d264f3b0dd14
- MD5 5b9de713c314c77de51f863954a44df8
- SHA1 8004af309c7c1263f45ee19f3365287e24f91d74
- SHA512 e08ed4038d8ed6ff13b03c4d70d2b9550ddff2f1a1f4c33407d168488a1981b6652dbe4fa0a3f4b36c2d8cb315ac073bca15032b5595853773bf75f73866603d
- SSDEEP 24576:r4zyZnvquhcyTeE5DSxkJK8v1LucKUdO+c6SIh2vQrSvoPnV+wzgpY0:rcyMxq1rO+c6XSfwfX0
- TLSH T1626533AC03B3D74C18FA7CB9A7031033D5AB6D96EA749B1AC125967FE7224B4C5860F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
RBGUIFramework.dll
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
RBGUIFramework.dll
Resource
win11-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
aspex_helper.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral4
Sample
aspex_helper.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target RBGUIFramework.dll
- Size 127KB
- SHA256 ad89d1559df31ba9d87fce28140863bea8f6d84852888a3c54e284005ca9f0f3
- MD5 856888067c82bef212d1d458f1f8a3f6
- SHA1 e60f846a8a0ab7b09328d911031410c647784229
- SHA512 d6fb9ac5404bee0c87e12a31cee71d58156fa8ee5f055d4169a1fb979d6bf8b937c8033a52c8eb3d9297855efda2ab15d3d6ff89d95b7f39fdc59387d1daff11
- SSDEEP 3072:I4cZVMdAnhnHSQSbYSLb4vdnKZbNG83s71pe:I4c7MkNy7bY6itKZbNOe
- TLSH T1F7D38E51B580C072D97E19380474DBB14F3FB9B0DE60DD9BAB581D798E302C1EE26E6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target aspex_helper.exe
- Size 4.9MB
- SHA256 ff2ba3ae5fb195918ffaa542055e800ffb34815645d39377561a3abdfdea2239
- MD5 e3929989e95ddd72eeb619fe5e415550
- SHA1 7187afe9d47735845392f4e380f8224529f9322f
- SHA512 167dd53141e79c2e9c75fca6c0ce615022a11917584deef2b2d0dd5c0044d503e62b4cbb04989740344697869bc45f21b42c9cbd45baa24720e4cb321a471d9f
- SSDEEP 98304:bZWDwZmrbBANTNbKPiKvV9K0LQkoTbokDl6mnpZEy:bZFNTNbKP/9K0LQkofoAl6mnpmy
- TLSH T1FC36B377871235A7C856B0711117863526368E30271356DEEE0E7DE86EBA2ECDB2D323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.