General
- Target Новая сжатая ZIP-папка.zip
- Size 130KB
- Sample260622-2payxagy4r
- SHA256 a29fc44b52decadcdccb279f3c4b1d3f626a8431a875d8d0fe8388ca5abc9080
- MD5 d0212595fcf4ba77b90ccc7f388ac65d
- SHA1 9ffb60f541693333a8bfe647b6b819dc365af2ad
- SHA512 f679fbb333b16b04cc9b87475114aba5891a8367ca02f14838fa86800ff124fa5ac49c897893d1183d8881493385d9504282c6555e4d8bafb642ec85cdae2d8d
- SSDEEP 3072:P2pKY8zKbUgyHtGmzTkwlkNN5FC8rc++5WY58:upP8zFgyzcwlkdFvcnm
- TLSH T18BD312EB5FA71C12C7CD97A3F7ACA443236204C44AA72AC3BD59E5B60245769073733A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
SatoshiTerminal.exe
Resource
win10ltsc2021-20260513-en
9 signatures
900 seconds
Behavioral task
behavioral2
Sample
SatoshiTerminal.exe
Resource
win11ltsc2024-20260618-en
7 signatures
900 seconds
Malware Config
Targets
-
- Target SatoshiTerminal.exe
- Size 216KB
- SHA256 949b186936491c1fe536ce241227d29f24d82d711804786f9348bdea12fba62d
- MD5 bab0e5f6d3217e1ff794d9d7cd83ea73
- SHA1 398525d5856e7161d1d42dde921aa2ba40127efc
- SHA512 4f69bbb5d8978fd95d55b6f205e9bfa5b349e47bb9deee701b00362a10c78524633fa5d7279c98a36e1d1ece523792740ff25d8439094d9de108916fa7b97421
- SSDEEP 6144:bgHP8zhgypKwcsnb/is63HPR2RM+uOsLS5C3910b4k4GMW3H:bi0zhg3wLis63HPR2RM+uOsLS5C3910F
- TLSH T1CB24BA9D726072DFC857D472DEA82CA8EB6174BB931B4203902715ADEE4D897DF180F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1