568fbc97ce19aacfa0e26b82b7823f52a8e40621fa0fdff8e3df5bf3bbb2586e

General

Target
Common_Offline_Utility_ITR-1_to_4_AY2026-27.zip
Size 752KB
Sample260605-p9tkjaf14x
SHA256 568fbc97ce19aacfa0e26b82b7823f52a8e40621fa0fdff8e3df5bf3bbb2586e
MD5 818aec5b6f2ef873ccf585959f7817b6
SHA1 0b9c4d16c30f93ae3ba83cb95135542c3b847dcb
SHA512 a554fda52027852d163cc5aec3a04b0156b6e0270519703de01f6cce72b6b2cb22cbe4996107df434a544cd97cfb2985bf70dc4a938f2e20e6f3f06774043afc
SSDEEP 12288:fyRep5lroGz6XmeJSXUzR9OIr/5bZ0AaUMSWBpm02HJ5aF1GIsyHRjRIfyQYns:fsepHsGz6WeJMYRJbKFRz74iHGIsyRLw
TLSH
T176F4231B39A2CBD62EC0AA4A485EE55C08FE268D7A1DBDB150C71D44B8EEDCB0D9D017
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  COU_ITR-1_to_4_AY2026-27.exe
- Size 1.0MB
- SHA256 9c6765a67206fa39594449e4c592d0ca8711908fcbb1510a327220c62a7e5cff
- MD5 e6ab0a34b5678b3851e3a0d85423c345
- SHA1 de16d648dfc0df271286835018d5e441469ef4c3
- SHA512 e70ecf7c04b0912eb604a6b5f28c8705e9688f4065ce5cba1f32b88dae0b54dd5798c51d3d092bbfc0fbf3c963ae56510f877670fa0baa82117b206c53a3c807
- SSDEEP 12288:BbpkDo52XFsA1lfRqC3ilqrbDJ5dlOPFWAviLb3o00BApiw:nkDo52XR1lfRqCyK5Ltvn0BAAw
- TLSH
  T1B4358C0BB79840E8D069D574CB664232EAB2BC460B60A6EF06D0F2591F77EE46F3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion execution persistence upx
- Creates new service(s)
  persistence execution
- Stops running service(s)
  defense_evasion execution
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1
- Target
  msedge_elf.dll
- Size 492KB
- SHA256 893dda821577ff29094bee88e418cde19ebc85d5127234083a2163c3eb9dc619
- MD5 267ff522c58341a7fe4bdbd5383c8b5c
- SHA1 ef96e6cfac620643dac6d33a13fe9c76b3e4c22c
- SHA512 b972543894a84d1255d7dcd865abeec48b8ba3c4237615d742cccd4468aee4899cafb9d20c06badd49c691ef478ef8ca19375b862955d896e95f9ca9bc24cdc8
- SSDEEP 6144:KNEgz2i1ESxK99+zkrh6RN++bZWNne6UGXUaL53SSJgj:6En99h6RNBbZGe6UGE2hY
- TLSH
  T1A0B4AE06B7A449A9E0ABC5788A538547DB7578520F60E6CF03E0E2393E77BE05B3E315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion execution persistence
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Creates new service(s)
  persistence execution
- Executes dropped EXE
- Stops running service(s)
  defense_evasion execution
behavioral2