General
- Target RuntimeBroker.exe
- Size 2.0MB
- Sample260628-wpgtkaay81
- SHA256 adc7a6babcd947fc0f812ecb48b5525253e04ba019e9d4cb9b633ae06074d868
- MD5 36475d08e081b3f80a8a8cfa329eecf1
- SHA1 28c60635110099cada89deeb08e898170baf186a
- SHA512 6ff8f77b4cf38cab2f231b5b9866faf91dda60698778f32537ea7b6188974000d006bed3287f31b7fecc00e3ccaa5a9b9c393ead36d966b3c31fa52a4897133e
- SSDEEP 49152:nwCrdYrKRn4RGH+6CWejw56eXb3E+TQUA/CK:zdYriCWGpGK
- TLSH T174A5CF9512DF552EFBCA3271D125FFDF81A62025488C384B5A3F9E492CD6B2231AD393
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RuntimeBroker.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target RuntimeBroker.exe
- Size 2.0MB
- SHA256 adc7a6babcd947fc0f812ecb48b5525253e04ba019e9d4cb9b633ae06074d868
- MD5 36475d08e081b3f80a8a8cfa329eecf1
- SHA1 28c60635110099cada89deeb08e898170baf186a
- SHA512 6ff8f77b4cf38cab2f231b5b9866faf91dda60698778f32537ea7b6188974000d006bed3287f31b7fecc00e3ccaa5a9b9c393ead36d966b3c31fa52a4897133e
- SSDEEP 49152:nwCrdYrKRn4RGH+6CWejw56eXb3E+TQUA/CK:zdYriCWGpGK
- TLSH T174A5CF9512DF552EFBCA3271D125FFDF81A62025488C384B5A3F9E492CD6B2231AD393
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects SiriusRAT