General
- Target DemsV4.exe
- Size 71.8MB
- Sample260629-2w4jsshs4z
- SHA256 5a83b92bc640d2d3614832f68b9b7e4b258e35eca137f11fcff76cb244ca5110
- MD5 a45a1fad75607fb7e07180904af05a7c
- SHA1 a55b4b83503c3c4308368a949f11fcf3e382499d
- SHA512 2ab25846c20b7363d45dda509e66d34515e21201ac83d5a1bed7fc5c6cb0a6c67966025bf0e4e9048e90d4f973410895e16304616355d8c497164199ddb7949b
- SSDEEP 1572864:5TIAikXJVrvoAJ4pUguPNoXWRHPr8rprr0oZ5Dq5SGlqEVNFZZM:5pv54igONJHArpHNejlqU
- TLSH T1BDF733E1AA9025A2F897C23D96D2863672F6F4316B2147DF03D943E52EA71C50C3D3B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
DemsV4.exe
Resource
win10ltsc2021-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
main.pyc
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target DemsV4.exe
- Size 71.8MB
- SHA256 5a83b92bc640d2d3614832f68b9b7e4b258e35eca137f11fcff76cb244ca5110
- MD5 a45a1fad75607fb7e07180904af05a7c
- SHA1 a55b4b83503c3c4308368a949f11fcf3e382499d
- SHA512 2ab25846c20b7363d45dda509e66d34515e21201ac83d5a1bed7fc5c6cb0a6c67966025bf0e4e9048e90d4f973410895e16304616355d8c497164199ddb7949b
- SSDEEP 1572864:5TIAikXJVrvoAJ4pUguPNoXWRHPr8rprr0oZ5Dq5SGlqEVNFZZM:5pv54igONJHArpHNejlqU
- TLSH T1BDF733E1AA9025A2F897C23D96D2863672F6F4316B2147DF03D943E52EA71C50C3D3B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target main.pyc
- Size 94KB
- SHA256 113cac6d46df2e59ec63e83781caef61dab67ba193caa316de715a23498722e4
- MD5 9b95e58ec9af71bdc3eff06b41c42a56
- SHA1 3179eaca87692e36b92f8c578d7e6aaa7d4f7853
- SHA512 8a6b3829c4d52b63ca3b657d0e4beb7e2a2afe3cc9bd9265642a13f7c2c103b8cb1bec6e1fb8d52b7177502d8b83bb1e83bbec30eaf419a1037c5543007d08f4
- SSDEEP 1536:37q+tPs8jl6f2eeWINg3xtbbrQsOFABIC6SgYwQ1QRq2tkZlShEgYw+YwMeyy3IO:ZapeWhHfrQs6AkSLwQ1QHELw9JzikPS
- TLSH T1D1932BF1B170243FF99BE1B962D7935A7360A003F216D602F43C55B96FCAA829D27D48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10