General
- Target io_pgmonitorbrasil_github_v3.9.zip
- Size 498KB
- Sample260628-pgsgrshs7m
- SHA256 608b3a488777054291fc13d8805cf22b8d16e2dfed08446e425d34407867aea2
- MD5 864ea257da87dab616f27d75cd9b9cb2
- SHA1 01c7d11599c39224dc965f015a2b567cb8daeb06
- SHA512 2c055c838ea9396ab70549430fff700a681d375ca0267a072732f773c43025cb588cb5049032db108fbbc45938aa3bbf2eb779d170509b7e87b9186ac8da8e97
- SSDEEP 12288:GB/e4pqNFTFbEXkNDoGbDDGIabs/7iiEVwYg2l3/2Ny6:GBm4pgT3oGTabs/7iiWw0D6
- TLSH T12AB423CD64BED0A87A658DDA9FD8FFD30CFC003A6D7526F2A51C1A13A1C404B64E958A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Launcher.cmd
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Launcher.cmd
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
icon.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
icon.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
reinit.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
reinit.exe
Resource
win11ltsc2024-20260618-en
Malware Config
Targets
-
- Target Launcher.cmd
- Size 25B
- SHA256 ef8728febd42479bc42b6977a98d5183752442d1130ce6e10507aa7190a75732
- MD5 f75c409d173730b3b1e2c084ed0913d7
- SHA1 96cf51a55f0304379da9bd570027b9c6488974be
- SHA512 23cbdb374bd32ebbbbe252912c411362fb820c6994377fc3f5e6339ab9cc8fb3c497fc947165a992036e5b01df7d382317b14c6542ebe76bff09287d1e90c2cd
- MD5 SHA1 SHA512
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target icon.txt
- Size 289KB
- SHA256 f6d59ebd26898cd89bfae86d02f2fb71aeadf255f75d144b59f19dcefc8f82a5
- MD5 c39d15fde2aa5c656e27af7f432fa62e
- SHA1 9e25b8c0ec1ab97663a38e9b14ac6e55778749b3
- SHA512 d2d13b0961b3bd35709a7010001f50d9d4d0dadd1b0b350cc668fd99bb7240af6d9cd4bf709a41dd43861e7f2cf27e9707156156c933a38433081e181c862be0
- SSDEEP 6144:erQ1KvSk5K9ULJMIvnsR47M5FzmvR4+UMyDcC3G8v:e8Yb5KuDsj/yR41v
- TLSH T12E54E5E02C8805D0DEAB5690EC738DA622777CF68B4A168B0F1CFCF57A546D1E6DD812
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target reinit.exe
- Size 636KB
- SHA256 5b6f8ee0072386b4b63cbcb8f83ef010005d4b6ed3cbd906a094a69726475d62
- MD5 182354a4d7e1e3a2b326ef173da0a2f2
- SHA1 d2c7e886d71a47739fe894e42af3280c2e3da6ab
- SHA512 77d7724945649d3bdf4a6b070f76ba3a2df599153270eb0ab56fc244191f952f26341ed00db2c90c486a9feddfe26f656b07cfc1236e93e69f3c90c90e874971
- SSDEEP 12288:jZijeChH0qL/tXDiqPu9cLWO4YCxLSRyBLZN4k:jZTiH0qL1Do+kYCxgl
- TLSH T1BBD4BF41B5D3C0B6D9B610704439AB7A5F7FAC210924DCAB83D839B68E306819F577BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.