General
- Target Sunnify-Windows.exe
- Size 185.8MB
- Sample260624-vczceady5p
- SHA256 e829072d18855f8fe80aff78253be20c145c5658a1ce96d4fd3aeee74b8bf003
- MD5 4c1d7cb5f02bf6bafee26805108c2552
- SHA1 1e5841cee90259de1cf05b1d766cef31dc02120d
- SHA512 b977ec0162c112df21773c8081e1744c83c7d61ed3a91fff902592b21255f50e67731e68fb922841633ddcd69c04de61b3e32d65aed3ff13d4ff65139a032a5e
- SSDEEP 3145728:PgYRPSC++6y9WX8i19GkYMonNlQOcLSpxjuSka6ycr9KhwVtnI05ABXHbt8U7K5F:PxaC4y9Q8i/DdoNSZSpohriwfI4Mbt2j
- TLSH T1F6983308DC9101CAC63462B582E2D7E9C7757BCEC775056F57AA02AA1FA36D403BF1AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Sunnify-Windows.exe
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
Sunnify-Windows.exe
Resource
win11ltsc2024-20260617-en
17 signatures
150 seconds
Behavioral task
behavioral3
Sample
Spotify_Downloader.pyc
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
Spotify_Downloader.pyc
Resource
win11ltsc2024-20260617-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Sunnify-Windows.exe
- Size 185.8MB
- SHA256 e829072d18855f8fe80aff78253be20c145c5658a1ce96d4fd3aeee74b8bf003
- MD5 4c1d7cb5f02bf6bafee26805108c2552
- SHA1 1e5841cee90259de1cf05b1d766cef31dc02120d
- SHA512 b977ec0162c112df21773c8081e1744c83c7d61ed3a91fff902592b21255f50e67731e68fb922841633ddcd69c04de61b3e32d65aed3ff13d4ff65139a032a5e
- SSDEEP 3145728:PgYRPSC++6y9WX8i19GkYMonNlQOcLSpxjuSka6ycr9KhwVtnI05ABXHbt8U7K5F:PxaC4y9Q8i/DdoNSZSpohriwfI4Mbt2j
- TLSH T1F6983308DC9101CAC63462B582E2D7E9C7757BCEC775056F57AA02AA1FA36D403BF1AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE
Loads dropped DLL
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target Spotify_Downloader.pyc
- Size 114KB
- SHA256 076380f458e43b80c37dbb13432293cbee7ba53deee9fd4e3f391e03f8b985b3
- MD5 6704e1ea944ff38adde690b918cb593a
- SHA1 b1e6d9924a35bd060717bc789f96df7ec658b22c
- SHA512 5e3436201a3239778a742873f7714101992c962c505b1bd6b8ed343b0fc5d42df77be300a045692b059931f914af4cd939f57b33fc82cf24c866eb5a530e860b
- SSDEEP 1536:eDF6G04eDh56WDCEzQ3XqAhDlJFGUGW584T+jncUCuKa7bZa7HDW42N4US:261hwWDCMQDDlmU184T+Qa3ZazDcS
- TLSH T13CB3B3857762C53BF844B3B198171606F329C1F2A350CB2376AFD02AAF96B796C521CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10