General
- Target Downloads.zip
- Size 5.5MB
- Sample260624-vcsvmadw9v
- SHA256 31b3e3c116c2933746f1fa30dbd8dc8ebd1f57da9ee30884349e8688db4b4eeb
- MD5 030443bcf145bb5154119c8322acb7a8
- SHA1 a99cca567cc1fd304123ce914aa625736ca44202
- SHA512 75703e63c78647359e84244707e88797c7fdef76cdc34ec0c0b8f8c2bcbf9365f790502af7e19b215d28744eeb77e189e60ecf236b58c49f816f1495b932e40c
- SSDEEP 98304:Yfg7TuNtNcQlUVLv+hoWpxh6+kGLSakv/VT7W06SyXqtX5MWwPntiRWSsyx/NtoE:YyTwNVlQv+KQLS/v/VTgSy69O/ntJSzP
- TLSH T1DC4633511784EC0213895461923273EE49298F289FE89BB77D98F7F0E8B4EF117641BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Extreme Injector v3.exe
Resource
win10v2004-20260513-en
3 signatures
600 seconds
Behavioral task
behavioral2
Sample
Extreme Injector v3.exe
Resource
win11ltsc2024-20260618-en
2 signatures
600 seconds
Behavioral task
behavioral3
Sample
Memense [Cracked by @miarey].dll
Resource
win10v2004-20260513-en
16 signatures
600 seconds
Behavioral task
behavioral4
Sample
Memense [Cracked by @miarey].dll
Resource
win11ltsc2024-20260617-en
15 signatures
600 seconds
Malware Config
Targets
-
- Target Extreme Injector v3.exe
- Size 1.9MB
- SHA256 b65f40618f584303ca0bcf9b5f88c233cc4237699c0c4bf40ba8facbe8195a46
- MD5 ec801a7d4b72a288ec6c207bb9ff0131
- SHA1 32eec2ae1f9e201516fa7fcdc16c4928f7997561
- SHA512 a07dd5e8241de73ce65ff8d74acef4942b85fc45cf6a7baafd3c0f9d330b08e7412f2023ba667e99b40e732a65e8fb4389f7fe73c7b6256ca71e63afe46cdcac
- SSDEEP 49152:NNEVtO1U1y1DDDDDD7Llngq7NNMqU0p2Vhk9a:NNEVJyZlng4p2V
- TLSH T1B8956D997650B69EC89BC932CAE51C2CF760A07B571BC343A46325EC9D4DA9BCF041B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target Memense [Cracked by @miarey].dll
- Size 12.0MB
- SHA256 7f8b71ddb61965b5fd8f49312e0cffd7203643465a8cc30a96c31508b3dde39a
- MD5 eb4cf3ff356f969d8223279d569e5c54
- SHA1 23101734cb2b7972596954dfc01250470950e81a
- SHA512 cc7be7f8ee35667becf5cea741cc4460db530f3f18026d2a897651a38661415b50ae47a089483dd3514cb0b6eb381a25891378653c10f51bb0dc1abfc5ba8227
- SSDEEP 196608:0vnj8PBRjjZgDpJ7LBz7o3vgLlua/GYH:0vjaSJhzM341
- TLSH T15FC68A2B1B53B1A5902852FE0CFF371C26B8B3D6EA4877C6C15DF82E4B156C914272DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Probable phishing domain