General
- Target patch.zip
- Size 4.8MB
- Sample260703-blcefshw2v
- SHA256 c61a225d18a4d4131e08353b3c4bce2b5494ca4737cff43bfc73d7713abc15be
- MD5 2a45182442325414a4283f5de1c22d6c
- SHA1 1ecf97c2a9d65730dd77db8f73d7a974e6c4a705
- SHA512 bd2b46bb36cbe4b697c054bdf32e4e56599e5448e95a8d0524c497b24ea9d89bd08767d8dc35377b216ceb2066620f358328e596a3e14c3364aa94abb40e813e
- SSDEEP 98304:s6U7/+ykBiXZAsEHBjwe1gesm8vYIJftCJiZ5C+/QcbNTi97jQSlYlvk:I6iSTH5ww8RJFCF2Jr6
- TLSH T17B36338DD5B64C74022D0E4843AA361E27AB53B05496404EDEF3F237AB8F756A3CD927
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
patch/SentinelRMSCore.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
patch/SentinelRMSCore.dll
Resource
win11ltsc2024-20260629-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
patch/csi_safe_v22_kg_lavteam.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
patch/csi_safe_v22_kg_lavteam.exe
Resource
win11ltsc2024-20260629-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target patch/SentinelRMSCore.dll
- Size 102KB
- SHA256 d9dbf4d6f0250571dc4155f1c6a94a123e692d006109f0b922c45daf74c98864
- MD5 bcc5b36599e95ac56d4efce4c8021876
- SHA1 4a2d89333bd3a23fc73a1c6f926bb929d78667fa
- SHA512 4c2bf2be0a2d6ece8c57de531f838f3798fef2f03119910bfb70de4d672c706cd9db19d4a97f911567f61e646503a91f04683521c45e3eed54b1832c8649208f
- SSDEEP 1536:on1QvCItHlow7nPOmaQoDrVZ2Np92+0GTc7nYc3diOsSKecvPKOKMEGcdE9cU3c4:oCwwzpaQArVZy09xtM1
- TLSH T147A3C62966F9CF5CE6EB1D7399F1614A5F98F4C10D63EFBF0D67242A38A12004A853E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target patch/csi_safe_v22_kg_lavteam.exe
- Size 4.7MB
- SHA256 beca3c02baf441233027d088f932349c4c2ec127e036bfe27270cb580d2f4426
- MD5 22689c4bf23ba57f5c0a3d0afd185f1c
- SHA1 a6f244953f58545607675f70da249531c3d52dda
- SHA512 cc269d795f0e60fa2407732617daffce1738f7e1d41f9c08a51e7c22bd04f0e18d0a5da95e33bfee966f6205587924da4c69303b852b9235e16ffbd9c1c07cbf
- SSDEEP 98304:8cLlWSLXR3dJyv3SbkyBN5IWZKpx8rkElsy8PwqBBGnblDqgD:8c/23SYyBN5IUktV6nLD
- TLSH T1CA363384721704BED095B6BA0329B7BC4C35AB4B47F29D83AF13AB046D793D746F2681
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger