General
- Target Viper.exe
- Size 288.5MB
- Sample260620-24lc7aa13z
- SHA256 aa4552bfe06c7c40b73323af732c7ec934ceeb5dc986caa05ea60caabfd5f1ab
- MD5 fd6ecd990b4104a939b63df31683ea9e
- SHA1 5eeb38cead2de38d39bfcd99efe1c663d94f7c29
- SHA512 b21e6279deb50bd686889bab3038b980a29051ef39e5c6d748c4eb13a9246d4e0b716bfedfc0be178e625954259f744e24d19fbb691ed98f147c986dad87ec55
- SSDEEP 3145728:9EIY4JTsT05OBuQjLJjeU8XSOePY5wvbouuqw5a+PXz4ZUM9X6KPuMGQYB/:/fhsT6QrLZeUrIfw+PXw9X6KPuH
- TLSH T1A0E8CF016FD85A55F23AC27892B3C261E6B5BC525311D6CF1084FA493F73BC1AA3E276
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Viper.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Viper.exe
Resource
win11ltsc2024-20260618-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Viper.exe
- Size 288.5MB
- SHA256 aa4552bfe06c7c40b73323af732c7ec934ceeb5dc986caa05ea60caabfd5f1ab
- MD5 fd6ecd990b4104a939b63df31683ea9e
- SHA1 5eeb38cead2de38d39bfcd99efe1c663d94f7c29
- SHA512 b21e6279deb50bd686889bab3038b980a29051ef39e5c6d748c4eb13a9246d4e0b716bfedfc0be178e625954259f744e24d19fbb691ed98f147c986dad87ec55
- SSDEEP 3145728:9EIY4JTsT05OBuQjLJjeU8XSOePY5wvbouuqw5a+PXz4ZUM9X6KPuMGQYB/:/fhsT6QrLZeUrIfw+PXw9X6KPuH
- TLSH T1A0E8CF016FD85A55F23AC27892B3C261E6B5BC525311D6CF1084FA493F73BC1AA3E276
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger