General
- Target OverTheHillPatcher.exe
- Size 31.2MB
- Sample260620-21asaaas4l
- SHA256 d128e4e49e881e5a1fae7edff9dc3d4cf08c10b21c64d818c9dd2a5bc512d824
- MD5 6d5fa6a5d8996903fc8001f00f434b04
- SHA1 23d8c363617d218362281dcb65111d92c9d58b62
- SHA512 065bcfb22928e5dfb82ca2c6d135176ef7d2007cfe9616f07d5e881dcce00daf29510028a0c1248dddd421afd95c5cfb6a37e9a14d3910a93dd0814cbadb032e
- SSDEEP 786432:8Y0W0b4pL0aW8zo0UCMw1MVP1U37u48MGh290gtAitVFaxl+aQPc6Us:8YxhpL0aWWUhw1Frx82htlBMQPc/s
- TLSH T1957733CAAB001955E1979734E8E1952B43B7B8DB23B00187D7F855930ED73E4ACBAB34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
OverTheHillPatcher.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
OverTheHillPatcher.exe
Resource
win11ltsc2024-20260618-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
oth_patcher.pyc
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
oth_patcher.pyc
Resource
win11ltsc2024-20260617-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target OverTheHillPatcher.exe
- Size 31.2MB
- SHA256 d128e4e49e881e5a1fae7edff9dc3d4cf08c10b21c64d818c9dd2a5bc512d824
- MD5 6d5fa6a5d8996903fc8001f00f434b04
- SHA1 23d8c363617d218362281dcb65111d92c9d58b62
- SHA512 065bcfb22928e5dfb82ca2c6d135176ef7d2007cfe9616f07d5e881dcce00daf29510028a0c1248dddd421afd95c5cfb6a37e9a14d3910a93dd0814cbadb032e
- SSDEEP 786432:8Y0W0b4pL0aW8zo0UCMw1MVP1U37u48MGh290gtAitVFaxl+aQPc6Us:8YxhpL0aWWUhw1Frx82htlBMQPc/s
- TLSH T1957733CAAB001955E1979734E8E1952B43B7B8DB23B00187D7F855930ED73E4ACBAB34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target oth_patcher.pyc
- Size 38KB
- SHA256 40d55baa6a0a7bef46c564027eee35e11ca84095ccfa965ab8507fde428f8882
- MD5 302781f8794e716816075ba91aace50c
- SHA1 81f4db386c1506aa28d255fdf0e5a68ddf07a077
- SHA512 c4df477a83b24615a02863e6afc7b65f32be8b2bd1e735ffef95d335c5b66586cb53bf488de16e98f70547676812f71cc07c4344b842d16bb7da324efaef6e64
- SSDEEP 768:yl1Sh2e9rRk3HVfBVAubMlNRuR0Ey/V4fC:m8C3HLVTbolKC
- TLSH T1E6030747B9316157EF20F1B980E9444493AE6DF6F638E3A3312E1274BCE66B1CE68744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10