General
- Target ____t_lin__64-v.6.981.exe
- Size 3.2MB
- Sample260622-sztpbses2v
- SHA256 ff1860389f41deedf8b72f3cd4cf7b33584c0b329264bb58d1d62d0f6cda777d
- MD5 7d8946ca862fe4a2cfe723f8583f4767
- SHA1 36d2ab1dd36957542552164c77dc387308be4b1a
- SHA512 0d8e6583061d1b520ec95471856c49cbabdc4ee47da16150ae6cbfd2c64cd399e5f3d9c7230bb1f348295bdf07c111bedf890afd3051344e6c8e0acbe8ca0bcf
- SSDEEP 49152:UEkKrfbFkjXJ1KC3AB7QXl9NgWuXoCWD1jA+Zd+d:UCzv7KgWhD1jPKd
- TLSH T1CDF57C47AD924AF9D06DA3328DB256917B34BC492B3227C72E50B7782E733D06D36B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
____t_lin__64-v.6.981.exe
Resource
win10ltsc2021-20260513-en
14 signatures
30 seconds
Behavioral task
behavioral2
Sample
____t_lin__64-v.6.981.exe
Resource
win11-20260513-en
2 signatures
30 seconds
Malware Config
Targets
-
- Target ____t_lin__64-v.6.981.exe
- Size 3.2MB
- SHA256 ff1860389f41deedf8b72f3cd4cf7b33584c0b329264bb58d1d62d0f6cda777d
- MD5 7d8946ca862fe4a2cfe723f8583f4767
- SHA1 36d2ab1dd36957542552164c77dc387308be4b1a
- SHA512 0d8e6583061d1b520ec95471856c49cbabdc4ee47da16150ae6cbfd2c64cd399e5f3d9c7230bb1f348295bdf07c111bedf890afd3051344e6c8e0acbe8ca0bcf
- SSDEEP 49152:UEkKrfbFkjXJ1KC3AB7QXl9NgWuXoCWD1jA+Zd+d:UCzv7KgWhD1jPKd
- TLSH T1CDF57C47AD924AF9D06DA3328DB256917B34BC492B3227C72E50B7782E733D06D36B50
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Suspicious use of NtCreateProcessExOtherParentProcess
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger