General
- Target AIMr.AI.Free.zip
- Size 75.7MB
- Sample260620-lyvrnses5j
- SHA256 de133d0f34710c566eee2468e5203a403add0713067b5d39ea5e74ba4a36121d
- MD5 95b8babae340626588cab43335e1ecc8
- SHA1 b835d29bd22a6bfa2c66cb11a6b330edf7d61b0f
- SHA512 38cd8e66026079ab264109594aaa34f759585b31e017cb9d69f303c432b83e92fe5a82cd3bda1da902b3101126c94c738359b2d4f0605e0d4c09f57b15c0f0ff
- SSDEEP 1572864:rRDomDB6k/X9BN7avOhoUSeyyBb7Q2GO3Oxe1ZeC61obNtYAgibuw9wmqsNe:1T9nH7amhzMy9/OMBv+ibuWqsNe
- TLSH T12A0833D32B478DD2B2379A7177EB6DB0A8B21FB214864571233093E8DF642715FA4683
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AIMr.AI.Free.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
AIMr.ico
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
AIMr_AI_Free.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral4
Sample
dll.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
theme.json
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
yolo.cfg
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
yolo.weights
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target AIMr.AI.Free.zip
- Size 75.7MB
- SHA256 de133d0f34710c566eee2468e5203a403add0713067b5d39ea5e74ba4a36121d
- MD5 95b8babae340626588cab43335e1ecc8
- SHA1 b835d29bd22a6bfa2c66cb11a6b330edf7d61b0f
- SHA512 38cd8e66026079ab264109594aaa34f759585b31e017cb9d69f303c432b83e92fe5a82cd3bda1da902b3101126c94c738359b2d4f0605e0d4c09f57b15c0f0ff
- SSDEEP 1572864:rRDomDB6k/X9BN7avOhoUSeyyBb7Q2GO3Oxe1ZeC61obNtYAgibuw9wmqsNe:1T9nH7amhzMy9/OMBv+ibuWqsNe
- TLSH T12A0833D32B478DD2B2379A7177EB6DB0A8B21FB214864571233093E8DF642715FA4683
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target AIMr.ico
- Size 54KB
- SHA256 e440d96915d3fe8e31d88437306482ae32df06ab98e074fd160b6a3ea611913a
- MD5 cf81cf3c9ba57ea02614513ab7db3faf
- SHA1 49fad17e8534d90c1a9b86669081f291b5ff4a0e
- SHA512 23a54abf311374e7ec4bcdca738f05f3675114e01a98da06bdd75a9949605d0e4553a713657be6484768a5b1597453b321569c8c8c1b63894c69f5f3dbf45e88
- SSDEEP 1536:cyEWU4pG7eIwAExf1D7JamatrrwZDEq6O3ZXNc:cyRpGyFJrX6OZXNc
- TLSH T1534301D5337463422AE4668AD42DA594BD3F03CDA23D8E85012C5D8C0962EF8BBB597F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target AIMr_AI_Free.exe
- Size 52.6MB
- SHA256 81a2b88790ab06c5d9e3ea9877b1e1114972374f18c5c7f73c9314c267fc1a30
- MD5 f56777243276e836f71ec3c919fc2fd5
- SHA1 abe33f8fc822b2153cf716f26300d74475d1e2a3
- SHA512 a2bcc814840504fe501b9aebd66c91957d42eacf830213d257e024af815dac7486918afaa82e3ff4a2b582a062d564ce1c339d80e3b286ef651a38a2df95ed64
- SSDEEP 1572864:Nv1fLFzIcRLfhJZgbm9TojnkB3ah6MGoOo1lWYS:vD1jLZga90rQ9o3h
- TLSH T1FAC733C27B62CCD5E637E270B5EA18A4F9B37E74118340B16320B2F46E7AA715EB4543
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target dll.dll
- Size 3.0MB
- SHA256 8a26c044ff15eee892341478e3b09e662ada16a30bfbb67d125d2b6b11eac306
- MD5 476c311081639da88c3504125ff149d6
- SHA1 cdd28d586b969521e487d0309b5d75650f820eb6
- SHA512 a8a7b6c1a8116015ba67df9269d8a49bc8392f9097d98eacd7b682ce56c95bd755cae8ef3efb88a906cff7afac6e67561b602e4c145dfecb8543958d134b498c
- SSDEEP 49152:m15HzP6fMYGiLU+GOVvVQHvwCU/QgGq2dSdVB+EtBviaJ2bUa4TycUa5GJ0UBKWo:ySDGiOjq2TEtoiPa4mcUrPRQp
- TLSH T1FCE58D4A66FD40A1DDA7E079C9174D0BC7F1B8060234D39F42688B9EEF777624A2E325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target theme.json
- Size 6KB
- SHA256 081c027b083cb6cae1e4c39dbd67a4194305f6f090811ade785e4e8bf801be02
- MD5 90aac0405c0e484759eca6193c58247a
- SHA1 ab7015e7a1da5eb1ea7da0485d996ac34f114623
- SHA512 ece8efc213a3f41580c06023619f2bed6f0cb63729af18fc9519536ac3ce97534f34fcf48cdba161aac86004d6637ee3d7f1291bf87cba292eaa9892021e4628
- SSDEEP 192:+bZ3yZ31SoYq+q2dke0eojeSEQ0cJeztFo2Z1eztFyOeztFpvktexkexezepF/de:aZCZlSoYq+ldkVeceSEzcJezty2Z1ezL
- TLSH T173D19D37CA1E0EAE12BA872B9A1ADB04F41C939B52588D4B35BCC14D0F77533C992E0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target yolo.cfg
- Size 3KB
- SHA256 a6415c2e303f7b3647913a7bb3675f0fe7234049d8875ae7d75c01b8e4dcb854
- MD5 65f390d99ea818c47c1752b720cb5b88
- SHA1 73e92a678b5d8948c76a6fa04eecfa6cec9c066b
- SHA512 9960a926548c91ba056ca8f8bbebb61ce5504e2feb3c536a87cfd3d994980df32125e959b348f33cac4db4f680208e4d8023b54c1a840f805a7d0d1f5ccad91e
- TLSH T1AF718C150647953E9273562570D86CC2B0F3A1524BF2B08AF4DEBDE0FE16DAD8A2EC47
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target yolo.weights
- Size 23.1MB
- SHA256 cf9fbfd0f6d4869b35762f56100f50ed05268084078805f0e7989efe5bb8ca87
- MD5 8911bf808aed305d6854c4ea48fcc731
- SHA1 451caaab22fb9831aa1a5ee9b5ba74a35ffa5dcb
- SHA512 7d4d9fe150f9fe3ea7d2310f1445fe983b31fbf06d301c70ecfe00e8559e6f1bf940198c2dd55db772238f23ea0092fb6553558e5414f3ee173b8b28e53c5b54
- SSDEEP 393216:DjDyuGrgQr/YQJjTn7zzdYCrTUQzHaydATKrYhpLZ3AfxImkkpso/E7TdjK3k/rW:Lfgr/Jjb7HdYibvdAT0elr9ThnD/rp2l
- TLSH T1543733639BAF7B8ADAE85145D110C0D71D85F5D03FB605E66BD3BACD8CB8C8348A02D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10