General
- Target loader.exe
- Size 5.3MB
- Sample260707-kw7g1set6x
- SHA256 ae2ffb739a4349cdc7cbae81524700fbee61c4c84a5a465753c084130720b41d
- MD5 ac493823bf6f28b2f0e7438f08698577
- SHA1 52ef6f2770e20073ffc5dbcd495a5296f06fb518
- SHA512 d60b2c9a91d2f27961e742ed91e702f084b98aa1e05cd03fed76c6a91c08683857e52683bbe4d9148cd6ba05514370787373c5dd6d525096e3c7a017cabc4e74
- SSDEEP 98304:I0OEjsjreXc8rFVcu5YfJvTWmh7hD5wtTaj9HckkAVnOTESes:IbE6YckFVsxR5hDas8kk8g
- TLSH T1A946230A6AE606F8C012C7F989D194BC7358FBDD4EF44C12B68D4B207DE3714AC76A66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
loader.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target loader.exe
- Size 5.3MB
- SHA256 ae2ffb739a4349cdc7cbae81524700fbee61c4c84a5a465753c084130720b41d
- MD5 ac493823bf6f28b2f0e7438f08698577
- SHA1 52ef6f2770e20073ffc5dbcd495a5296f06fb518
- SHA512 d60b2c9a91d2f27961e742ed91e702f084b98aa1e05cd03fed76c6a91c08683857e52683bbe4d9148cd6ba05514370787373c5dd6d525096e3c7a017cabc4e74
- SSDEEP 98304:I0OEjsjreXc8rFVcu5YfJvTWmh7hD5wtTaj9HckkAVnOTESes:IbE6YckFVsxR5hDas8kk8g
- TLSH T1A946230A6AE606F8C012C7F989D194BC7358FBDD4EF44C12B68D4B207DE3714AC76A66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger