General
- Target Redact.zip
- Size 65.3MB
- Sample260529-rm1rfaex4j
- SHA256 1064b19d01297780f090c4fc056e55009f07f6a3885fecd8dc9796befa4e2286
- MD5 15b5e94f18acf27384b6b690129559bc
- SHA1 b8e1e332cd8cbe0c84d02770f4037ea44f8814f3
- SHA512 1589544d379da02ce5b99e65c104aa7831dcee040c02d456975350d6212a4c8b27a84bf7c980467f4282c960dfe26871c2b4c11d4e4c85d2517821103578304d
- SSDEEP 1572864:4ISZF+i6AySJ/Jy4DIqZm1vsu0Rz1shM1IPETs+OXgh5Q7s:4jePSVJylvezaPh+OXyQw
- TLSH T118E733F3C8874E5CF159E409EA5038CBE76623772A1676C4AC6BF78342CE502065B76E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Redact.zip
Resource
win10v2004-20260513-en
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
Redact.zip
Resource
win11-20260513-en
2 signatures
300 seconds
Behavioral task
behavioral3
Sample
Redact-Setup.exe
Resource
win10v2004-20260513-en
9 signatures
300 seconds
Malware Config
Targets
-
- Target Redact.zip
- Size 65.3MB
- SHA256 1064b19d01297780f090c4fc056e55009f07f6a3885fecd8dc9796befa4e2286
- MD5 15b5e94f18acf27384b6b690129559bc
- SHA1 b8e1e332cd8cbe0c84d02770f4037ea44f8814f3
- SHA512 1589544d379da02ce5b99e65c104aa7831dcee040c02d456975350d6212a4c8b27a84bf7c980467f4282c960dfe26871c2b4c11d4e4c85d2517821103578304d
- SSDEEP 1572864:4ISZF+i6AySJ/Jy4DIqZm1vsu0Rz1shM1IPETs+OXgh5Q7s:4jePSVJylvezaPh+OXyQw
- TLSH T118E733F3C8874E5CF159E409EA5038CBE76623772A1676C4AC6BF78342CE502065B76E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Redact-Setup.exe
- Size 65.9MB
- SHA256 7c8b64d28d02a75e59f185d3111b7235ea7d733a436a7c37e84da44a8ee4afba
- MD5 4e229846fb1cef32d7edac20879f85b8
- SHA1 88ec6fab96548d260a002cbbce88d8307896f126
- SHA512 65f5ded76085e85a2b0560b6f430523b6dc9ada08cce9d898c17e2c6cf26afc6dc1b083d2031219367cd919179a8bc2b8cc888f57ff8d0ca23cbf026367dcd27
- SSDEEP 1572864:RYsjl2yqoKCj176q5uaLst/Wm21Rjsz+/+VcxOmqfYxJSOl6:RZ8rCZ76T/MlGV/mqfgSOA
- TLSH T1AAE73333A18B573DE06E563B89B1E1719A372F21640A4C41AAE4BC4FFB7E1500D3F65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.