General
- Target public-4.zip
- Size 7.9MB
- Sample260604-hv7ehsay8x
- SHA256 21a489d0b368dd8e910b715400a832c7b1fa2f3b080a928b8ccffac5c10cb594
- MD5 379185659dafc46002e2dfb513009828
- SHA1 a817f11b71b255ade43d9bfd495e25fb03a7d824
- SHA512 49d1e331244e27e28e0f5bbce2102a4c611e8f28c8c588ab248552a17dd788656b4869ce6ab10963b0c209292922beae8f181cb94c19d3404e91ad966e931cd2
- SSDEEP 196608:xC+MPlnhSK2BlnsdgC+MPlnhSK2BlnsdFbaVGSWe4s:k+Mthb2BlQ+Mthb2BlI1SF4s
- TLSH T147863355246B7AFCB4F620475409A290553F80C6CF949FA9EEF5A912CBC89B1383FB1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
public/Fixes/connectionFix.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
public/Fixes/connectionFix.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
public/roblox/Install_Roblox.bat
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
public/roblox/Install_Roblox.bat
Resource
win11-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
public/snowfall.cc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
public/snowfall.cc.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target public/Fixes/connectionFix.exe
- Size 21KB
- SHA256 340ecb20720b5f00ede8f9aa46ab82a835d9b41e1ab96cad8e516912db60a5f5
- MD5 5f73432e5976137fd2b431853f44d7df
- SHA1 80ee9158d76b1722c1ff6ea724698628ae347918
- SHA512 074090de5ca03c16060ae745251dc67881504547fc2fd1f529142235202e8f55c3914791553c4ae584fc5b6ae28a8cd2ad9558dc72d0163009f0ff33ca2d396f
- SSDEEP 384:JE/wg4EDGmlywEYAdpPprHER/i8JpbG379k:o4EDGmy7YAdcli8fS37
- TLSH T1BFA23C57FB4608EAF26A927DC6E66A15F231B8085B32D6CF1781506F1E763C0A87EC41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
- Target public/roblox/Install_Roblox.bat
- Size 951B
- SHA256 7f50550b0e69c22b9342cb0c55d95f8b22378432abd1718f36ee91d1b5be01be
- MD5 b4d2f5127949a8b950c1f60b6099c822
- SHA1 685ee331864d3ba60c35ca683de2e57d8855d4dc
- SHA512 76e47b95e2d0ffd18e7ffebc071e1f24f71ba10f3c7c12eae85904bc2555dd64c0a8c1136a1a4175585ed8e64aab71aa44b659c2d4e227b923b83dfeefd94891
- TLSH T14411E1EF8701407176B003CAD5BE96A4BA43604B081669E3F4EA303DBF07191139E6DB
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target public/snowfall.cc.exe
- Size 1.9MB
- SHA256 d11dae036eb0c3f5600f26ae3aae32411cb72b8e2cf75394812580b678a86c94
- MD5 0c4b0d16fcc940f330243e3e5f8c8078
- SHA1 18429c12d7f2e81abf0a504bb14213b3da8ba1e9
- SHA512 158d509e291a9ccb439e85703977e9bea743f352b51f56181659a6f5951e1ad3ae00663db5ad7f8708a1a7ee94bdf99355c1ed22f5e7a8c97ae9b55ea89ae178
- SSDEEP 49152:Cfi6R1zXBNGT1175VOFNXM9EzasWn8aqQ:T4u2M97
- TLSH T1F395AE46B2B900E8C0BBD039D657A61FE671380403385AEB63F04E565F67BE15F7AB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10