General
- Target TomatosAntiRemoverPrivate.exe
- Size 11.9MB
- Sample260701-dc836sey81
- SHA256 54b58bedf391876a343ecc4d70061412203d9caa054ca4077f322fbd9a19c069
- MD5 399b28baa3b5c978f41c70cd933c02ed
- SHA1 ffa7892c0b62f81f7fc3e6fec92b5328b0b5799b
- SHA512 a302165a3103ddbcbb757fafec49dd63b9c04c19d99c49134917ba3705bb74f9154c62a56ffb5388cc12e5a34a0595a9dbf541dbf547d49f668f0f7207c49210
- SSDEEP 196608:norAES8tbW897GLPHMe81SF2RPUewuGgSa4cCMPWhLtKZ25xQHsMRqxbRgFq2nDU:ncFv16PsZg2KezvSa4czChK44HsMRqxT
- TLSH T174C63389BBA40999E86B223F68D55133A3E0B0214765C99F1BF14A185FB32EEFD34750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
TomatosAntiRemoverPrivate.exe
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
TomatosAntiRemoverPrivate.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral3
Sample
TomatosAntiRemoverPrivate.pyc
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
TomatosAntiRemoverPrivate.pyc
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target TomatosAntiRemoverPrivate.exe
- Size 11.9MB
- SHA256 54b58bedf391876a343ecc4d70061412203d9caa054ca4077f322fbd9a19c069
- MD5 399b28baa3b5c978f41c70cd933c02ed
- SHA1 ffa7892c0b62f81f7fc3e6fec92b5328b0b5799b
- SHA512 a302165a3103ddbcbb757fafec49dd63b9c04c19d99c49134917ba3705bb74f9154c62a56ffb5388cc12e5a34a0595a9dbf541dbf547d49f668f0f7207c49210
- SSDEEP 196608:norAES8tbW897GLPHMe81SF2RPUewuGgSa4cCMPWhLtKZ25xQHsMRqxbRgFq2nDU:ncFv16PsZg2KezvSa4czChK44HsMRqxT
- TLSH T174C63389BBA40999E86B223F68D55133A3E0B0214765C99F1BF14A185FB32EEFD34750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target TomatosAntiRemoverPrivate.pyc
- Size 16KB
- SHA256 e88d53e5135d1f79d64321d0751137da372f884d253a398f774569528c4d5a90
- MD5 c7f35a8d20dc24c1f1e48a74c7ce018c
- SHA1 cc2f8cfe2e9237d0adb8b1a38086d96458abb22e
- SHA512 294f8cf6f9c672a499f01598e73f970993bd778349658ae95819e7ba592087720cb9d072572ad8c0b0bba1bdd8039c420163d6064601f0ba1e7d76cccaae0c2d
- SSDEEP 384:pNeAM7QpEbi6tAjYonz8pddGT11xaUNisiwUJeJwjbq1UD:pNeAkXbi6tAElpXGPBNisiwCTD
- TLSH T1C37228F271A024B7FBA8E0F160F29D2257007486A1B3C56588B4A5FE7CCAE5B070631F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10