General
- Target 2b75864dca612e07583e3b3ccf52487d6a9e81250594540b10b709df56c0c660
- Size 5.9MB
- Sample260706-mpdbpshz7k
- SHA256 2b75864dca612e07583e3b3ccf52487d6a9e81250594540b10b709df56c0c660
- MD5 4bc1ff63eb437b8834896f94d6e60175
- SHA1 3bf172bf8ad69e1dd73cc3808d040f6b7a4e8f6b
- SHA512 47c6bff8834714068c593f7e0e2866724333a5f655636c56ee51e4b9baae1a227d2fdb97ad9e35e2d86ac298ae726f9d23996f9a0f86b1c7964a440839ab209d
- SSDEEP 98304:O1v8xmEEHgRVxSKaOCRbcagngD0vQ4iKYCNDKjjlhxuwD527BWG:Y8VEaxuOEgngVbCYjxf1VQBWG
- TLSH T10156BE12F940C031E5D140B296BEAFB5897E9D30173958D7BBC45DB94A306E3363AB2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2b75864dca612e07583e3b3ccf52487d6a9e81250594540b10b709df56c0c660.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2b75864dca612e07583e3b3ccf52487d6a9e81250594540b10b709df56c0c660.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2b75864dca612e07583e3b3ccf52487d6a9e81250594540b10b709df56c0c660
- Size 5.9MB
- SHA256 2b75864dca612e07583e3b3ccf52487d6a9e81250594540b10b709df56c0c660
- MD5 4bc1ff63eb437b8834896f94d6e60175
- SHA1 3bf172bf8ad69e1dd73cc3808d040f6b7a4e8f6b
- SHA512 47c6bff8834714068c593f7e0e2866724333a5f655636c56ee51e4b9baae1a227d2fdb97ad9e35e2d86ac298ae726f9d23996f9a0f86b1c7964a440839ab209d
- SSDEEP 98304:O1v8xmEEHgRVxSKaOCRbcagngD0vQ4iKYCNDKjjlhxuwD527BWG:Y8VEaxuOEgngVbCYjxf1VQBWG
- TLSH T10156BE12F940C031E5D140B296BEAFB5897E9D30173958D7BBC45DB94A306E3363AB2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger