General
- Target SharpShooter v4.1.1.exe
- Size 16.8MB
- Sample260706-p6ebfafv8t
- SHA256 36b4149136e2fafd6d3dd595a81c7521df4435be3528608ee7257a7f239f89d8
- MD5 6bdd6362d2a42c1ee0cbd31d7cc3ce9d
- SHA1 2cc071c0dac8429f23381010f8430fd746aa042e
- SHA512 6788bb8edd1e61f528e006bf8253ceecb30bade7ecec39fe90ad2d8a3267c29065e69118d7e8c32547fe4227e8f2f01d5dbb1cbf6f4117692ffe99f51a5cb790
- SSDEEP 393216:YsiEptGqdSKHGCW4Gq0rW8770udQJluIF3MnG3VsaC2f8kE5ydP+z7H:R3GwSEGCWfrW8770udQt3MG22f8DZ
- TLSH T195073386BB4D0898F0969239C8C2855A87E1787613B8C6F757F02D591D6B2C8FF3BB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
SharpShooter v4.1.1.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
SharpShooter v4.1.1.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
main.pyc
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
main.pyc
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target SharpShooter v4.1.1.exe
- Size 16.8MB
- SHA256 36b4149136e2fafd6d3dd595a81c7521df4435be3528608ee7257a7f239f89d8
- MD5 6bdd6362d2a42c1ee0cbd31d7cc3ce9d
- SHA1 2cc071c0dac8429f23381010f8430fd746aa042e
- SHA512 6788bb8edd1e61f528e006bf8253ceecb30bade7ecec39fe90ad2d8a3267c29065e69118d7e8c32547fe4227e8f2f01d5dbb1cbf6f4117692ffe99f51a5cb790
- SSDEEP 393216:YsiEptGqdSKHGCW4Gq0rW8770udQJluIF3MnG3VsaC2f8kE5ydP+z7H:R3GwSEGCWfrW8770udQt3MG22f8DZ
- TLSH T195073386BB4D0898F0969239C8C2855A87E1787613B8C6F757F02D591D6B2C8FF3BB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target main.pyc
- Size 7KB
- SHA256 80d05d0bf75dddf59f3c0bbac2143d89f6edc490b4a72d3f84b51ea8f1d01c73
- MD5 7fb5c8c13c8c2c628739c1cd85228989
- SHA1 063ea17428eaec52e9d2eea5618c888c0ddd6779
- SHA512 e0bb5a1f3c9042819027412f338688e802a93aa53252dde16a193ee0f0b8c2f3b0019752548234f3fe912f221fa86cbe561392f2926b950684cf421187607f57
- SSDEEP 96:A5NNrsVHnac0qdd50ALhPvzSgFSKMR6fN4cGBRTL+ZAanbJy:A5jsVN3QANP7SgjMR6LKL+ZAgJy
- TLSH T10AF1F9403681D677FC59277B58831B59726282A3B330923337EAD416BF2738B4D228DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.