General
- Target os_decision_1.7-beta.5.zip
- Size 565KB
- Sample260622-ry6f3adt3w
- SHA256 3ef8d156b8ceac1db11db3ddee7ff35ff7152290823171e8ed76526797348777
- MD5 a149472bc8cd522e940b142c84d21dde
- SHA1 e521993dd19736b8cd5112ee2bbd69b7944fc5cb
- SHA512 a6a02584c258dd10576a4b65f6767ca4233dc1ea602dd5fb2b467806d6853b39503fba8fb37575e3d60b88b7e2335a1d97422a2bb0e54259cd77ce29e34b2c26
- SSDEEP 12288:dqwEDcCCXO6wlOMWROC/FTeHo22Qm7NzofOr/mShe:KgCCm4MQOC/gHozN7NzomLmN
- TLSH T1E3C423443901C1DDC74A6F3E9D944EB46E7D80E79A5A790027CEBD827D85AB033C9D2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
App.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
App.bat
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
buff.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
buff.js
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral5
Sample
load.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
load.exe
Resource
win11ltsc2024-20260618-en
Malware Config
Targets
-
- Target App.bat
- Size 23B
- SHA256 a91b3308a7e9aa9fa660c72d27f226d8f50bfac2629f79a828fbecff323c0fe0
- MD5 cabf147518b9751e928426cf30136872
- SHA1 d92b1e743af660e5d6556c26cf7e84f9e9e87747
- SHA512 492e254a8cf8f35d77b88629810112219627094d7a8a13fad0efa1e76f1091f3050a4caba85772079963fb76c08f33a6f3026c91a65426b9cb505e1b37900a53
- MD5 SHA1 SHA512
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target buff.log
- Size 290KB
- SHA256 c7b71a992c6ca1467164b643136d986c0eec28548f30533456a3ea0f442c85a8
- MD5 abd194196578479f36fe6a71d7feb7a0
- SHA1 0d87d9e8332530cbabdb714d1a2d09badd82497b
- SHA512 26bee1b9525d4c09387b5d90f7cf7727e0d66a1286e9d8ac93a9244869a2ceeab1940c5277e3fda9258320ecba3361c8d009f12ebfd804fa7386623118127d9b
- SSDEEP 3072:XuuV/hWwv/Bm5v2zyUF4G4l0f2gJC+qUHSOY0ob9rUN5pZctyvLtTeuAM2zSsQVZ:euV5ji2zyUm0I+9HSwoC3STksbG
- TLSH T1D154E7E0A58818A1CAAB86D1EC6F8DEA71B764F58B4E16CF0F1CF4E03B54191D2DDD06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target load.exe
- Size 852KB
- SHA256 167b166e26dd44f580a00f2c879089c5362eff5120ac88e0701b11b1eb320ca9
- MD5 b09254ee683d91d04d52d08731dba8db
- SHA1 f0c5b4b2b1c2fb641af80181f55c711f56410418
- SHA512 77444128e19d69b49ac3e74dcf6d750c5bfc1c38efad6f479014273bc59b11d46443e2e77f961df103c4d66ecb498cacfa586714aa206fa34e5bfbf43e39b617
- SSDEEP 12288:g628L2HCSGt4FMz4+PUlv2kyK5yB1Tazo/UCjTMnvKdsoFwhiHBjBZok:92HCSucMz4CYbV5yBtaziU0TcSNFPhL
- TLSH T11F058E59A27401F6D9A78134C9569A4BD7B2781607205AEF03E06BB73F37BE11E3B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10