General
- Target loader.exe
- Size 5.3MB
- Sample260707-by5lrsft3x
- SHA256 e40cb7d2d08c193b0fb3f8817f4b0f88a66883e280b5639d6104ccbf8727d933
- MD5 24b6fe05c9cb795db238ed32993c1cd3
- SHA1 530f1b19bd32801944d71edb414584e698576e25
- SHA512 32f1b45f3be4f96266833e2aa856ef12e89e6112337687975a08c285edcb63fcdbf7e43d52cf5b33680c825722474f64311335b0bfd1e89cd61e5e26923e5b0d
- SSDEEP 98304:djDacU9k4EHv//LGzZoeYdw0KumGWRHm7ex27d42+6hUtOYcI+MQ/+1c:5VU9TEPL+ZX90Im7eIR42JhFYhl1c
- TLSH T1934633C676C657F8D406CBB8D99270AD7368FBEDACE48C15F2882A316CC27115C7A316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
loader.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target loader.exe
- Size 5.3MB
- SHA256 e40cb7d2d08c193b0fb3f8817f4b0f88a66883e280b5639d6104ccbf8727d933
- MD5 24b6fe05c9cb795db238ed32993c1cd3
- SHA1 530f1b19bd32801944d71edb414584e698576e25
- SHA512 32f1b45f3be4f96266833e2aa856ef12e89e6112337687975a08c285edcb63fcdbf7e43d52cf5b33680c825722474f64311335b0bfd1e89cd61e5e26923e5b0d
- SSDEEP 98304:djDacU9k4EHv//LGzZoeYdw0KumGWRHm7ex27d42+6hUtOYcI+MQ/+1c:5VU9TEPL+ZX90Im7eIR42JhFYhl1c
- TLSH T1934633C676C657F8D406CBB8D99270AD7368FBEDACE48C15F2882A316CC27115C7A316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger