General
- Target ColumbineRPG.zip
- Size 23.0MB
- Sample260630-c871bac12y
- SHA256 aa3821c18bb4a4b91178a98b944ad5a8ce829332bb9e6408172a4e92d0a581d9
- MD5 958a5f6a079f94e58d23196195f98315
- SHA1 ad43bff0fe6af375b6e3b68fed757f0ae661bbfc
- SHA512 b32a3c78ddbb87a0a52bc39d59558a28366951ca732098b8b02a5249384eb23b0bff3757fd530d63ed73a3449919b60516699404c7e3f5863f099a8158266a55
- SSDEEP 393216:EUApbbGmvKiBWPpaqSQNAc6ENm5wVPPTr6AtGZP3hzWgLxEel9Uq5J48Fm4omWaD:E9p/n3WRRxmhke717CgLrl9TE8FaTaD
- TLSH T1513733B3ED05C837FD7F4F708BB577AAAA108135300D5AB12D79282B4DAAB51E874D84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
UNLHA32.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
UNLHA32.dll
Resource
win11ltsc2024-20260618-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Setup.exe
- Size 471KB
- SHA256 da7729c02d3a967d8e17a27545c0bf605869d4a4dc338fcb092291e798ce5309
- MD5 e3910b75e8419efff3c8094101103494
- SHA1 11b8fe107498e4cdfb2bd1d0141e23d78b308110
- SHA512 7fba9ae4f7199d561a5761b6f8718cc7ac28fa64ddf3062aeb2da54b138371dd507da3bbc48dad3dc53ecbb9db7f20472497e5e9faa9b996a211906d2a82236d
- SSDEEP 6144:16P5Glw0aMATY6vFnHyRyIzHSRciN16G52HahIrZy9PEF4Gtlc9AsXq:1u5GqBF0yuSRpNx2754G7cysXq
- TLSH T163A45C27F6C0A833C1223A789C4F97A4992AFE503E295D4767F91D4C5F3938279292C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-
- Target UNLHA32.DLL
- Size 232KB
- SHA256 1fda9015acbf708a170f3f0c6b5c5888832c5b9125da0803e598b237b5cbe424
- MD5 26a33bcbcb4b3b9230e3374d066c5186
- SHA1 e1f338ef9ae2e0d289f61956ece608ee56b16358
- SHA512 ba2323c1036039c2f6052382e017d492aa13c6f5cfe3019a7545e64395dce34ceceb224dad70cb3f223d0c631662ca652d3f7d46521c5e97c3b25ee9eb3d1f03
- SSDEEP 3072:KKt/T+RITiAWeVhGNvbly9P3pabzjglu6AxMghGDhXULgrNJU9HL24U1jKAK9:jq6TiAiNT4LGjJxx2Xwr24NAc
- TLSH T10434C0D13ADC84B1D9E3073D5450B77DA2AEBA7443F28283DB817EDC68219454B1E39E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10