General
- Target MXT-Release-1.1.2.rar
- Size 1.9MB
- Sample260704-ffxwesbs2v
- SHA256 c53a495ce0ad0d2b0eb70845ad343ae38d7c931fd6a28112defdbeaaf0a5f89c
- MD5 1cacb9e65afa70e3130d550567ec80a4
- SHA1 3e52d8c1b47ba2956c2eb72c480147221084ed26
- SHA512 75d04d906dc47b13beba803b859c7a6bb46522661c34cbba2f56b597c070f36f2cf0199b2351e7d9c9a7fdbbc58042df51e156bce19b69bce03ee752bbd67400
- SSDEEP 24576:vQH6DZjNwGQ3lbMggf9eb1aj31rf0/d0ypkaIbiiA+ESc/Y7KL2fMal3:vQgwN1bMMWFg1hVnm2GKKfM+3
- TLSH T1099533AED2FF464E0CA1053A44F26A7C803AF0356D53DA17DB986EC9592BB23142C57F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
MXT-Release-1.1.2.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
MXT-Release-1.1.2.rar
Resource
win11ltsc2024-20260630-en
Behavioral task
behavioral3
Sample
DLL_UNLOAD.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
DLL_UNLOAD.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral5
Sample
Dx11 ImGui - Black Ops lll.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Dx11 ImGui - Black Ops lll.dll
Resource
win11ltsc2024-20260629-en
Malware Config
Targets
-
- Target MXT-Release-1.1.2.rar
- Size 1.9MB
- SHA256 c53a495ce0ad0d2b0eb70845ad343ae38d7c931fd6a28112defdbeaaf0a5f89c
- MD5 1cacb9e65afa70e3130d550567ec80a4
- SHA1 3e52d8c1b47ba2956c2eb72c480147221084ed26
- SHA512 75d04d906dc47b13beba803b859c7a6bb46522661c34cbba2f56b597c070f36f2cf0199b2351e7d9c9a7fdbbc58042df51e156bce19b69bce03ee752bbd67400
- SSDEEP 24576:vQH6DZjNwGQ3lbMggf9eb1aj31rf0/d0ypkaIbiiA+ESc/Y7KL2fMal3:vQgwN1bMMWFg1hVnm2GKKfM+3
- TLSH T1099533AED2FF464E0CA1053A44F26A7C803AF0356D53DA17DB986EC9592BB23142C57F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
- Target DLL_UNLOAD.exe
- Size 13KB
- SHA256 6fb0f291d96f7ad572938e9f55d411c8f385f652580d4d1eb03f41e484bfbeb7
- MD5 01a5a7019e5cb56717e5f032f0da2c01
- SHA1 72ae665ced2b1e252dedd502e0150eb61b9b40fa
- SHA512 7cd4baaf46b3f859d26e221ff48f294818b3e3f07938293dadcaa309a8d5983e9dc4e1ad4a4e180157d8b64e2c5ccc7c1bf2979296683cf20dd3699bf06a915b
- SSDEEP 192:VolgzpHnuQVM4f+Sfz3BU7dJMRp+UaSNPAtLRcXOEy7ex2lz5fNgz9:6izHC4flsdI+UaSNPAbcXry7d3fNgz
- TLSH T13A521A61B7EC6773C9FA0FB5A572018107B1F2524632DEAD0CD9229B9EB37140642B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Dx11 ImGui - Black Ops lll.dll
- Size 2.1MB
- SHA256 e5fca5b46693cc1d6b89548905c670438bdc8f9f05492a4ec50835c3d14ed56a
- MD5 7f628a8b440b6f09c68a599bac65b7e5
- SHA1 ea8d917fb930eeee2ec1ef4f3ab96a6910bb7669
- SHA512 900b0e768f8f47016873fc846e372b7886d9eb51c61c6b332ae0d598b40321c8e1280ecb4bc281dc43be4901f6c77ac25a041fd3de74fa4f5616800650dfdd75
- SSDEEP 49152:ljisUkTeYomhpAWHV7nkuHh/qNwffAj3g/bTqSk63n3LI:Jie+IprnkU/lgQ/6Sx
- TLSH T197A5CF0AF3A2495DE2B2B13CC1466753D732742943215BEB33C506A9AFDA7E01FBA741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10