General
- Target _b7a3fc527793301bd39eae5c5ae037730cc2132ccb8a59bf45d02f246bbaea19.exe
- Size 1.1MB
- Sample260706-k1rmcscy6x
- SHA256 b7a3fc527793301bd39eae5c5ae037730cc2132ccb8a59bf45d02f246bbaea19
- MD5 e83a712c54d817c52c88444f49917116
- SHA1 39a677efad24acc47fb15ab64426920250c2bb61
- SHA512 bde0a6dda45c7c2b826d35d80bd27000c80827ff52a24385d39bbc04972e66babe82d51030ced908c2c27ec2cdc2203d3d54b7bd02da46707f30192be906e677
- SSDEEP 24576:q5qqigNf0NSIXtbJXsFxWVVALNUSPkQOrh:q5qP200IpJXixWPALm7QOrh
- TLSH T13135F1290D873A99DABE1FB8C176189833F4D8439396E7272FED01F5DA62B84CD13452
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
_b7a3fc527793301bd39eae5c5ae037730cc2132ccb8a59bf45d02f246bbaea19.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
_b7a3fc527793301bd39eae5c5ae037730cc2132ccb8a59bf45d02f246bbaea19.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target _b7a3fc527793301bd39eae5c5ae037730cc2132ccb8a59bf45d02f246bbaea19.exe
- Size 1.1MB
- SHA256 b7a3fc527793301bd39eae5c5ae037730cc2132ccb8a59bf45d02f246bbaea19
- MD5 e83a712c54d817c52c88444f49917116
- SHA1 39a677efad24acc47fb15ab64426920250c2bb61
- SHA512 bde0a6dda45c7c2b826d35d80bd27000c80827ff52a24385d39bbc04972e66babe82d51030ced908c2c27ec2cdc2203d3d54b7bd02da46707f30192be906e677
- SSDEEP 24576:q5qqigNf0NSIXtbJXsFxWVVALNUSPkQOrh:q5qP200IpJXixWPALm7QOrh
- TLSH T13135F1290D873A99DABE1FB8C176189833F4D8439396E7272FED01F5DA62B84CD13452
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1