General
- Target Agent64_binder.zip
- Size 14.7MB
- Sample260705-bk5plsbw5p
- SHA256 1f71174a4a0ed9d1e608275e4fd5bc9f778d608b6b000156992dcde60947a235
- MD5 0f32a8220dc31635a0f4aa637dc5d1f6
- SHA1 19bae54783dbc9e93c3697a4f580eaa528d3d80d
- SHA512 929162457559d57e009aa7abcc6c93890d8727b18d55a7a68339a9c35a444e2e67b69087175b0818cf856d7dadbc73ca4bd0936c24af4849b64d95a1879f8f7f
- SSDEEP 393216:l/BmHzI1uSjIfL0MhYwG8I+aTBpEzPaZcaQsmz7y:BrjIfLPhWZ+YDCPTaQ5+
- TLSH T1EDF633DE41C53F11D980FB993FE55990B3C04A5534D27EBC2D82237A2AFA53A051EACE
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Agent64 binder/Agent 64 Binder.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Agent64 binder/Agent 64 Binder.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Agent64 binder/agent64 binder source code.py
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
Agent64 binder/agent64 binder source code.py
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target Agent64 binder/Agent 64 Binder.exe
- Size 15.3MB
- SHA256 471dda55d94fc0f9f8c9e14950e0f1dfdafd9ada33e092641fb427eb3273c75e
- MD5 bdbdc34ea7c465b0dff1bdee733cb401
- SHA1 a98794c4c91366e8636509f930f047534b7adf05
- SHA512 5655b56432bb9687e2ab64e1e021105a684570439931b07d1bd3d05283b6456f27cedc736b40ea40ac90fa1106f29cf2e895950768f28e0c286cd1be86d19560
- SSDEEP 393216:roKMF0orNtZq5XB6ZKaHsxtEDwe2i5Rf:rkyorNtZq5exwt7el
- TLSH T18BF6334452F0084ED845E63819F1C73592D0AD711A208ABE16F21EE7FAEF2BD482DE7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target Agent64 binder/agent64 binder source code.py
- Size 8KB
- SHA256 fb2064568b66cbb37119e100c8190a1d655a642d2d1f5d0decb2fb46b4987622
- MD5 4f0a5900eb2bed9d50de30291e286105
- SHA1 b121bb7757248a06aaa25e05d2d2df68ec91546c
- SHA512 56db3d93f3de3c94f523e1d95277f76ce68c6390f05b366a8b40ec4533396d7c072338b7b9a2da399b6abfc6640ad1e5d3ab7a15dce7dd0a5d5ae2acb20e6865
- SSDEEP 96:fto11Um82g2eCnuPJrdw3vH5Pu7auqNITw11wqA0fhOZXw6YIZbB8gR:e/18V2eCnKdw3FMamTt+EZXw6jBZR
- TLSH T11302340B8C0C1030A5B39D6EA62360A6E50FBE17A97BAD17787D05D00F7C662D5D4FE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.