General
- Target WindowsProject1.exe
- Size 108KB
- Sample260627-bs68eaf18t
- SHA256 c7a44aca6b0128fd53dd71e960cd6275ea47771421301d0f564d6eb80ba3d5e0
- MD5 8c35d21f1e8a7fb430cdd36bad6d02d8
- SHA1 b9652c0ea36c05d58d3204be8fe0113d0bbf3572
- SHA512 cd1e2efc9053e4e1efccfa3fef10c32e5059e054a043374fbde099d7032a1cd1fddc015fcbd815c9aa4f28fd5f234137f2ff64158ddcef30b409fccc67280edd
- SSDEEP 3072:lhRXX51KIkynBLDBMmpChNugRzg6svCRC+ORZ5:lTbFBBMSSpRfWRZ5
- TLSH T18EB35C01FDD2D037E6B60C31886A9E648D2DFCA14F946DD7B3840DEA0E34AD1AB36957
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WindowsProject1.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
WindowsProject1.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target WindowsProject1.exe
- Size 108KB
- SHA256 c7a44aca6b0128fd53dd71e960cd6275ea47771421301d0f564d6eb80ba3d5e0
- MD5 8c35d21f1e8a7fb430cdd36bad6d02d8
- SHA1 b9652c0ea36c05d58d3204be8fe0113d0bbf3572
- SHA512 cd1e2efc9053e4e1efccfa3fef10c32e5059e054a043374fbde099d7032a1cd1fddc015fcbd815c9aa4f28fd5f234137f2ff64158ddcef30b409fccc67280edd
- SSDEEP 3072:lhRXX51KIkynBLDBMmpChNugRzg6svCRC+ORZ5:lTbFBBMSSpRfWRZ5
- TLSH T18EB35C01FDD2D037E6B60C31886A9E648D2DFCA14F946DD7B3840DEA0E34AD1AB36957
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Drops startup file