General
- Target silversync-care-v1.6.zip
- Size 456KB
- Sample260622-ry56asdt3s
- SHA256 63af3b982c26abcd7710501e91788dd5144991960a50cb66055e371ce3f43979
- MD5 b0ecc72ea6db470bb2972c3cd4c81eb2
- SHA1 dae5ede8cc6cacff878825e1e1da740f6cc2145a
- SHA512 ae30b924f6097ca0717cd9735e8af45984f2b4ee62bf9ebd2640e99fbc98aa85bf5eea97909088db436b18d67a07e47f19b09964cefd9dd71dda1161ba0912b7
- SSDEEP 12288:i/pj5tFltx5309/TzYfcEaN9B/Jm0LU0gM7aQt:CjPFj30B4fclN9BhmSH7
- TLSH T150A4232C59610F367DB7778089395F02472498073ADDABFAC70F3AA84DDEC909B66748
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Application.cmd
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Application.cmd
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
compiler.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
compiler.exe
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral5
Sample
dl.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
dl.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral7
Sample
lua51.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
lua51.dll
Resource
win11ltsc2024-20260617-en
Malware Config
Targets
-
- Target Application.cmd
- Size 31B
- SHA256 7d3572f6938c41264938882c5d6d1cfd63974b3cbe50f2471613abfb2cc2397e
- MD5 df0d8d9948f405fb7002dceae67c7bb1
- SHA1 ad27af911618d0ac77d22a7b7d600be3499e6178
- SHA512 8d21d128b071554fdde3a101a90a706a38a38db638612e7688f9b0a50c57152935edea41cd7c05eb50a679bc6dd5621e9f96a771d11ddcd0c775e67218b3239d
- MD5 SHA1 SHA512
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target compiler.exe
- Size 31KB
- SHA256 7ad4b911d05a12f91ab27ba3baa351a56653ca099dda7ad87ee2b94f8cd018c9
- MD5 c2a7f19ba96dc460d591d37d664fe6aa
- SHA1 2e930eb7072ac6f8906c5df11e041d88aaea1fcd
- SHA512 baf23c903b68e13786657cf1bcfc6db55493988eac28edc3caaee1011f65ff04eebef9e204853a3abf07d4a36ad7ef5bb8a3683863fac600b49590d7376624ad
- SSDEEP 384:ib7da2Z2gMMu7VGueXHa2RIC23208fKUS5CWhYJ8L:Wa2JLuZ/eXaIO3r8iuWhYyL
- TLSH T138E2C62DB68258DEC591D27CA0D60731F079BD56172766BE1308F23A7E21AA1CB3F427
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target dl.txt
- Size 303KB
- SHA256 fa7fe271ecd3788e09687ddde8cf11db20beb84ef7493c794037638ddc3d4fa1
- MD5 4998de9f79bb7ae42c790d4dfaf93732
- SHA1 d7eb571cae2e57c969dfcf30e76cb58e40739c53
- SHA512 4ce84f75f9349551c745a003226c65cea3c8538c8e513e3d4fd87237460d2ae64f721f4fbd9c87634c96d2612f19ce51f96311484a49aa7b80570ae083e89739
- SSDEEP 6144:sJWWPILnY3o0VNcLzIvJGF+GGXhc0R86KW3+Vt:+WWPeuoYAGRJRXx+z
- TLSH T1FE64C6D0218854E5FEEF8D90ED628DE7217B24E19B4A168F0F1CF4E436641E1DE8F866
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target lua51.dll
- Size 587KB
- SHA256 04d3c82782927330d56827ff551697666dbab4b3abf5b86bde492efdd142bc58
- MD5 82e81158366a953c33d0720dfe34b95b
- SHA1 4b5eee1d2ba5bf3ca0389c0415626634c640a4bd
- SHA512 3c9f7360bafc48d573d24fe1612e23a97fe08944c9ad5f5d46818d5e74365d00d7e5aeee63391d4c0de7390b5fecaa695b698fd62ccc741dec181f0d24ee82af
- SSDEEP 12288:Psx+0xTI82jcKvyp9jvgEXXBKHKLx2h601BqStQIF3yB:OrmyXMKF2hXBtQIF3yB
- TLSH T173D4160BA6B362BCC267C134879B8BB1B931BC5402346DBF55A0E7311E71E91179FA39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.