General
- Target aae780339fc73d8e41b3ce7c1d266946e76b043d5e618400f1500853d3c22d2c
- Size 4.8MB
- Sample260706-j9mt4agt2n
- SHA256 aae780339fc73d8e41b3ce7c1d266946e76b043d5e618400f1500853d3c22d2c
- MD5 c5bae064bacd74cc5398d569059c663c
- SHA1 71af8d1183a77a844cf67c56be3a6d8ab8788fee
- SHA512 cd43a1190b5a4843b7cecb2837cb2196c7cd9360c1eb4472414270a4b04481df3f2ea703052e45c5be5ec187f7997d9410b86bf3bb236b31da1c7583282da7e6
- SSDEEP 98304:6/tMaVRE4MVvSqEIE2hzTWkHvT9MMRP2y5MvUG1nYcv78Xvd:6/tMaVK4MpEIE295MMN/8B+cv78Xl
- TLSH T13D36336876E30C9BFC686664D0C27CF861FD4CA771F6825FEF214E9614820BD25C6A72
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aae780339fc73d8e41b3ce7c1d266946e76b043d5e618400f1500853d3c22d2c.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
aae780339fc73d8e41b3ce7c1d266946e76b043d5e618400f1500853d3c22d2c.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target aae780339fc73d8e41b3ce7c1d266946e76b043d5e618400f1500853d3c22d2c
- Size 4.8MB
- SHA256 aae780339fc73d8e41b3ce7c1d266946e76b043d5e618400f1500853d3c22d2c
- MD5 c5bae064bacd74cc5398d569059c663c
- SHA1 71af8d1183a77a844cf67c56be3a6d8ab8788fee
- SHA512 cd43a1190b5a4843b7cecb2837cb2196c7cd9360c1eb4472414270a4b04481df3f2ea703052e45c5be5ec187f7997d9410b86bf3bb236b31da1c7583282da7e6
- SSDEEP 98304:6/tMaVRE4MVvSqEIE2hzTWkHvT9MMRP2y5MvUG1nYcv78Xvd:6/tMaVK4MpEIE295MMN/8B+cv78Xl
- TLSH T13D36336876E30C9BFC686664D0C27CF861FD4CA771F6825FEF214E9614820BD25C6A72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops startup file
-
Uses the VBS compiler for execution
-
KoiVM .NET virtualizer plugin for ConfuserEx
Detects KoiVM .NET virtualizer plugin for ConfuserEx
-
Suspicious use of SetThreadContext