General
- Target AnimalCompany-NoEAC.exe
- Size 49.8MB
- Sample260708-1cbt1aat71
- SHA256 40df46c776ef988e927fadcab45b1baeafbadbebdda83fe6145247191add7194
- MD5 72d7e116579e1e2132e90c80740d7425
- SHA1 974d73d7cde17a2672d650075310926a54044eae
- SHA512 1f521d61a6b3154457e4ddccc9acadb038b50bb51a6ea4a157208a399480413e40d1fe233ea3d08fb2878c54a3de667038a7bf461a5c50f5eb2adc9f130162ca
- SSDEEP 1572864:gJgYWE97Ol/sei3ofQVGJqfeUFydsBuzr6Dq5ZNS:gwu7Ol/sbcQV9lFyuIzWe
- TLSH T1C0B7336CF2D5427BD443E53CCF668971A250FC221B278CAF56C5912BDE53BE2083A789
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
AnimalCompany-NoEAC.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
AnimalCompany-NoEAC.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Behavioral task
behavioral3
Sample
ac_noeac.pyc
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
ac_noeac.pyc
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target AnimalCompany-NoEAC.exe
- Size 49.8MB
- SHA256 40df46c776ef988e927fadcab45b1baeafbadbebdda83fe6145247191add7194
- MD5 72d7e116579e1e2132e90c80740d7425
- SHA1 974d73d7cde17a2672d650075310926a54044eae
- SHA512 1f521d61a6b3154457e4ddccc9acadb038b50bb51a6ea4a157208a399480413e40d1fe233ea3d08fb2878c54a3de667038a7bf461a5c50f5eb2adc9f130162ca
- SSDEEP 1572864:gJgYWE97Ol/sei3ofQVGJqfeUFydsBuzr6Dq5ZNS:gwu7Ol/sbcQV9lFyuIzWe
- TLSH T1C0B7336CF2D5427BD443E53CCF668971A250FC221B278CAF56C5912BDE53BE2083A789
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target ac_noeac.pyc
- Size 9KB
- SHA256 9da919f857629a6825f949525deed64ba88fca851ccba231a630b3f131c32652
- MD5 ba8e6dd22b1f3da53637bf6d86273e47
- SHA1 f5405925d8678862e6c8a0c898fbe82311d22f7c
- SHA512 5103100b643b9880996fdb17e7dba8104a09a1aa82f7eeafb579494264e066b4dea38422015c94f7126d1f83cf44992cd6066f328e100abb121ee068dc9367f5
- SSDEEP 192:8ncDKOiOETfyd9UihzV9YCFmmzPa0eMJ6IY5:h2ZG5KsmoehI+
- TLSH T13E12B6B49E00B536C9ECE07974C7DCA0E726C146A105EB07F62CC9799F8976CA4AD31E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.