General
- Target bluewing emulator.exe
- Size 2.1MB
- Sample260601-vr93fsbs4w
- SHA256 0946747a01ca9e3a4133c03bfa112b13b2066dd4459191984442eff3fa46978c
- MD5 2947929bfdfd22d93cd552ded2177e66
- SHA1 f5161bfaecd35b2ea7e96b3b8d27476edbef3c3a
- SHA512 405fcff1c7e8820cb8cd00b06614917dbdc409f1b922fecbe5ebd0ca180d9f043117863d3a2bb5406fec82a1f683d67dffe8b8a5c81432eded93f66d2eda8252
- SSDEEP 49152:K++f0oSKLTmmK9lODbLcXS8Waaq59TxcrrlTl/u6iT:R+wAvi
- TLSH T16DA59E0566E803F9E277D1B9C9621607E6B2B8450770AADF03E05E9A1F377A05B3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bluewing emulator.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
bluewing emulator.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target bluewing emulator.exe
- Size 2.1MB
- SHA256 0946747a01ca9e3a4133c03bfa112b13b2066dd4459191984442eff3fa46978c
- MD5 2947929bfdfd22d93cd552ded2177e66
- SHA1 f5161bfaecd35b2ea7e96b3b8d27476edbef3c3a
- SHA512 405fcff1c7e8820cb8cd00b06614917dbdc409f1b922fecbe5ebd0ca180d9f043117863d3a2bb5406fec82a1f683d67dffe8b8a5c81432eded93f66d2eda8252
- SSDEEP 49152:K++f0oSKLTmmK9lODbLcXS8Waaq59TxcrrlTl/u6iT:R+wAvi
- TLSH T16DA59E0566E803F9E277D1B9C9621607E6B2B8450770AADF03E05E9A1F377A05B3F712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Possible privilege escalation attempt
-
Modifies file permissions