Overview
overview
6Static
static
5VBoxRT.dll
windows10-2004-x64
1VBoxRT.dll
windows11-ltsc_2024-x64
1install.exe
windows10-2004-x64
4install.exe
windows11-ltsc_2024-x64
4msvcp140.dll
windows10-2004-x64
1msvcp140.dll
windows11-ltsc_2024-x64
1vcruntime140.dll
windows10-2004-x64
1vcruntime140.dll
windows11-ltsc_2024-x64
1vcruntime140_1.dll
windows10-2004-x64
1vcruntime140_1.dll
windows11-ltsc_2024-x64
6General
- Target _cd078957167e1af4de39aecdb981cd14156fa81d5a9c6ac51e74ae5b6199a12a.zip
- Size 11.1MB
- Sample260624-lex3paa18z
- SHA256 cd078957167e1af4de39aecdb981cd14156fa81d5a9c6ac51e74ae5b6199a12a
- MD5 9f36877ed925f1dc2cf53db235c53b8c
- SHA1 5a1fe9e72e94d4c92b866f1fc167a5bc098b70bb
- SHA512 649f0bcb0bd96a85fdf831cb975fc234708b25eb4fba860838ceab0f2f5fc45f8e2969acbb9415bf5faff246bd3c04e8849d31c90360e785b24d4ba1583648f1
- SSDEEP 196608:AOjqC4P7ZYTfbEYyFFSSMJd9e+kXNT9v2vED9O9NhweQgl+LY0jBE+h:AAqCudYP4TnMfUNT9vO698hTELLE2
- TLSH T1DAC6331F31D0CAB04F5D5037287D33AE40A64E9919ECD581413BC7AD3F3A2EA15AB9B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
VBoxRT.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
VBoxRT.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
install.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
install.exe
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral5
Sample
msvcp140.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
msvcp140.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral7
Sample
vcruntime140.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
vcruntime140.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral9
Sample
vcruntime140_1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
vcruntime140_1.dll
Resource
win11ltsc2024-20260617-en
Malware Config
Targets
-
- Target VBoxRT.dll
- Size 6.9MB
- SHA256 b15a094c4bb564807ac613ef41eefd140ea4572388721049dffc53a5e4acbdbb
- MD5 5f19af95bf04355286016cf0410268ab
- SHA1 3da5ea6abf27bd5fe03278d25a8d28237e3a8a23
- SHA512 5fed04e93fe513ab8ef63ba1eacec772600a20cf3bf569d8fe3d6386923026afb5cd32b4eb7ac6e5f704d2961556fab79a2bd79c257db4b9f54a3552b039971c
- SSDEEP 196608:LOLN8NZKi4nACj3S/+lUJzZEnvnmF50Y:LOLN8NZknACTSuUx2nvna50
- TLSH T1B776ADAAB6E400E8D9BBC138C6974617D7B2B415177097DF06A087AA2F73BD6163F700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target install.exe
- Size 61KB
- SHA256 ce56000c4030e1885bd6fdb8edbbbde10e41b9b7ec182bfb7321a83a9174f9cf
- MD5 e1f2b5de6b9148cb4582da8338be4b95
- SHA1 3965ad357f563f4672458aa70f39d92be63b41e3
- SHA512 62c54422a25b2868dfaf3890d3867c966303f1f2d5a790d07888ef2d4fcf5891075a6725985a37e2c354a58436efdc935e5f952ce16f87da06c71f56f1a742f0
- SSDEEP 768:5qtApHRm6ohPyS/y2zMsgcr4+i7jsTOjBBXr7NeuSo8N106+r5fYi1Va2E6:qApHk92kyj31euSoa19+r971Vak
- TLSH T171537E57675710D6E8278238D0956A23FFB574A2231086FF4321D05A0FB33D2BEB9BA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target msvcp140.dll
- Size 557KB
- SHA256 72fe4598f0b75d31ce2dc621e8ef161338c6450bb017cd06895745690603729e
- MD5 7db24201efea565d930b7ec3306f4308
- SHA1 880c8034b1655597d0eebe056719a6f79b60e03c
- SHA512 bac5729a3eb53e9bc7b680671d028cabef5ea102dfaa48a7c453b67f8ecb358db9f8fb16b3b1d9ea5a2dff34f459f6ac87f3a563c736d81d31048766198ff11e
- SSDEEP 12288:Rsjw3shF+jss1I8CgEWTe5+YMCMGz2MMY5U489wiyaf+QEKZm+jWodEEVksLd:Rs/5U4RBaf+QEKZm+jWodEECsL
- TLSH T176C40927B74902A0E196A3B8A1C34306D7F17C4A8312A3C792FBD66D2F577D56B3B190
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target vcruntime140.dll
- Size 94KB
- SHA256 d8faf8ebf360ed0b3b1a43877a04863f7e044b3d19b641d88737e0829d683b36
- MD5 6e34fc4a713c3fbd88e47ac188d2540d
- SHA1 1877a17da406d147566168c56aac1eb576782b37
- SHA512 848a1d9602210d7da0f6e4d7817af08dc02baac7eccf1cfaadaf3a24b55e1316e77c40672a6a1195797e525f448817e534ae200e99cdf548ee64a7996fbcec4f
- SSDEEP 1536:NT11/9nhu8HQRC/lYLFy1E0CWtVn3GwDa/becbfQqFt3:N5NF/eLUCnWtVn2wDObecbftFt
- TLSH T1FA936C4A76A442B7D06AD178C2E35E16F770B844877053CF03B686AA8F67BE05E3D346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target vcruntime140_1.dll
- Size 36KB
- SHA256 0d8217dbb0d52a3f8cd233b089131ca19aa6e0fc0c0fb10081f3c50761f5d15e
- MD5 d76532f224b6648179b77525326e8754
- SHA1 cb0a90adf84b9c19e750b166789452693f031053
- SHA512 721b4f0f55fbeefa394d3471c66d32e2f0f452f9977987450b1662b8e2e9a88d1b9c014b5f2a4b378d99f6fe4de6b5810f8b00157ae25b0de2a3bf3e211ea2fc
- SSDEEP 384:isFi8rE+2UUtAAd928q4qXnU5fBLn8umItRWqoVJtYftmz/U3ZlvJWriKW/014gx:s8g+2UUt/yXgBLn85aRZoZStvZRcbB0Y
- TLSH T1BDF23A9563784092E46B95B0C4D3AF27FB38F8A15750978F0BA0825D2E237D0F63E71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.