General
- Target Demo_RustTweaker_v1.3.2.exe
- Size 194.3MB
- Sample260528-slbllady31
- SHA256 927ef2b5f462aacb7db85e95ae1fb30ead07cb9925ed9dfd63a98f419905d9a8
- MD5 fcabe96d61aec243523c08a4573451ba
- SHA1 e215d0cd9ff4dbe3da7ca7d51dc66b47417bd6b9
- SHA512 01bb81ebb678b65027931bc5946e4c52ad3a492950d74db5d410a8d008cba96c434b5c1e74792fc85d53e67bb6dd27cb24941c033e64f95340a110843ba4f8d9
- SSDEEP 6291456:ROQD5R5jsdtprJahf5hvuwO+8LwgfNoRlmL2XYLt:nGtprJahfr2HesxB
- TLSH T1E9A833AEA5C16F38EEDE593F8FA3810078369C31642B4E4399507484C379179EF6AF85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
Demo_RustTweaker_v1.3.2.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
Demo_RustTweaker_v1.3.2.exe
Resource
win11-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Demo_RustTweaker_v1.3.2.exe
- Size 194.3MB
- SHA256 927ef2b5f462aacb7db85e95ae1fb30ead07cb9925ed9dfd63a98f419905d9a8
- MD5 fcabe96d61aec243523c08a4573451ba
- SHA1 e215d0cd9ff4dbe3da7ca7d51dc66b47417bd6b9
- SHA512 01bb81ebb678b65027931bc5946e4c52ad3a492950d74db5d410a8d008cba96c434b5c1e74792fc85d53e67bb6dd27cb24941c033e64f95340a110843ba4f8d9
- SSDEEP 6291456:ROQD5R5jsdtprJahf5hvuwO+8LwgfNoRlmL2XYLt:nGtprJahfr2HesxB
- TLSH T1E9A833AEA5C16F38EEDE593F8FA3810078369C31642B4E4399507484C379179EF6AF85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger