General
- Target MultiBlox.exe
- Size 50.5MB
- Sample260626-b112csg19r
- SHA256 286e8f9758f2515c6b025c00df0df9d3fd490ab8a7e190d7e54d2d22dd179e8e
- MD5 40bab4970942d0fe6f5bc973c78c3181
- SHA1 863ac7ec4747db4936025025c0d3ef3c4177baa8
- SHA512 92c1ace1ccf58f373f98dabf044c3b8409405644ff3fa8b86fa3792c08609332c84874d2172967fa2f93c6ca5d28d7ba51f69d2c5871d32215f07092c35ff8df
- SSDEEP 1572864:0QXGMK4XR3bLSCU/+6yr+vWISpCCpUmWVd/wX3:7gYRPSC++6yS+IS5pUma5wX3
- TLSH T1CAC7338BD8CD0487DC1616F2EB259216CD6478EF8BB2567E0C102147D3BBADB6A3587C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
MultiBlox.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Behavioral task
behavioral2
Sample
MultiBlox.exe
Resource
win11ltsc2024-20260618-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target MultiBlox.exe
- Size 50.5MB
- SHA256 286e8f9758f2515c6b025c00df0df9d3fd490ab8a7e190d7e54d2d22dd179e8e
- MD5 40bab4970942d0fe6f5bc973c78c3181
- SHA1 863ac7ec4747db4936025025c0d3ef3c4177baa8
- SHA512 92c1ace1ccf58f373f98dabf044c3b8409405644ff3fa8b86fa3792c08609332c84874d2172967fa2f93c6ca5d28d7ba51f69d2c5871d32215f07092c35ff8df
- SSDEEP 1572864:0QXGMK4XR3bLSCU/+6yr+vWISpCCpUmWVd/wX3:7gYRPSC++6yS+IS5pUma5wX3
- TLSH T1CAC7338BD8CD0487DC1616F2EB259216CD6478EF8BB2567E0C102147D3BBADB6A3587C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger