General
- Target Minkio.rar
- Size 27.8MB
- Sample260705-n456psfy4n
- SHA256 cd4e16395c1d7f5b699984d5c6a0fa9f531a7d45df402777dcb8b5f0c17d3220
- MD5 357a484b6f895a633416992568355258
- SHA1 19e04e30da3108a35f38a8567726f64b5933c131
- SHA512 9d7aeb779a4171241e280d7a79f8f6fcb1bcc2df92bcf2c5196e41927526f8dc428eb4e8b732edee670460e54f03d942a91d3a846afe10b6fe6271427e5f308c
- SSDEEP 786432:Hm9mXReTpUCfhG/buyinNhH0TylcyujYL26kPXJ:FBKUSoqvNWyujH6kP5
- TLSH T11157332A2F65FC9B0CF53E09F5A8629EF7AEDB335125275AC7F1720C680118163E16C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Bin/Decompiler.exe
Resource
win10ltsc2021-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Bin/erto3e4rortoergn.exe
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
QuorumAPI.dll
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Tutorial.js
Resource
win10ltsc2021-20260513-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target Bin/Decompiler.exe
- Size 9.4MB
- SHA256 fb5c5e11296f8cd6b552aa03daf760d99a380077ff92ba657d4d956af5f3d0f8
- MD5 a109790efbe0542dddf63ef0415dd508
- SHA1 34d3f0c57dd5359f21bee246e00ee01f69132678
- SHA512 a148f1b6a5423147651ab12fad0250ff000efb605e7d468fa45d1e1c1bba71bf2748741d9e62aa72228b9e674d3766d736df64e81b85c9d441e840e0bed75d7f
- SSDEEP 49152:AhW7+AqGnMYHZi0h/tipa/lZ9dco869rpyd8cuIhwSt+AOaQXkiShcwaPJXqlExR:UkDPUKXmtGYGz2YhN
- TLSH T124A6C62A676960D9C1BFC07892839F22BD21749D073977F7898182692F20EF87D3D764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target Bin/erto3e4rortoergn.exe
- Size 30.7MB
- SHA256 5c52086ff88042524a7c5535a12110b3f3f3432284a74d7b5395eee317c873ff
- MD5 b2089bf5d16408c1c38aa70ea5aa4eda
- SHA1 2dfc800f6f26adedc1db51650e26ad30c372626c
- SHA512 11b42a26cc3099726203e677b15f3bd4dc837fb5935e50a0ce35e9fdbb7479e161d86982cdbea5cdc30b64d2f40e92bd46c4eb114bd11378d8badd820d13b205
- SSDEEP 786432:Qfc8zV0qit+YWGGyYOqiLTDPjoV+e4DvgI:8VUtFfVqk4a4
- TLSH T1E1672393A8C563E4C2DB0604938E179F12D1A5B58AB9990D37C13C035E21FFB7A49FA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target QuorumAPI.dll
- Size 235KB
- SHA256 bcc150762acace609f8bbbec9cc13af17e8869449e2efd16337c82fb5c0ecdfc
- MD5 21fb94641a4da6dab6315ac2fead46e8
- SHA1 59bc11d415435f7b80468ade1eb6541370036142
- SHA512 a30aa8b7855472b49fdc0a38ceb8184569b3a44adec0998462813dc5fbb370e5c3de0ff398266d4972fc039fe8712911fb8a2a37ccf457cedc2d973a4ec904c7
- SSDEEP 1536:cmTLQHBkNPaeIvFMQnSSOk5vygqDO2EN48wrY5RmvExxC1l8QaEKyIlYPgftM2iP:TN435vyuaYWfxaM2HKUuKOBp
- TLSH T1C334DF03BB44DB14C97C343A82FB2D2C63A1F5CB1771894FCF057A661DD62AA9D8C25A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Tutorial.txt
- Size 5KB
- SHA256 14000953adbe5167122fc12ade43bce94f1214f6cf9f6b00bd65debd3b746ba1
- MD5 e8b3d612ed5794df406accc2a4ad4bc0
- SHA1 02fa22df11d399539c12f402784df22b69c1d37f
- SHA512 fc83a65228d788efdaf875ea3ce294907c4f4a64307b65470ce25064e20fe63c61201b578a4321f931e130351dc3b1ad3a768de6ea87a6234e223e2fa4e3700c
- SSDEEP 96:RUazN3Hv/vbOynr94gimJxQBSaJJ1CtZ6e0K1YYidK:RUazN3Hv/vbnrCgiu+BSqJ1CtZZ0K1Y2
- TLSH T186C11E967E8B872231B6822DCB258D99FF53830F260B6722BAFD811C1F39115C515EDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10