Overview
overview
8Static
static
3ut_br_play...ns.zip
windows10-2004-x64
1ut_br_play...ns.zip
windows11-ltsc_2024-x64
8DeltaPatcher.exe
windows10-2004-x64
1DeltaPatcher.exe
windows11-ltsc_2024-x64
8README.txt
windows10-2004-x64
1README.txt
windows11-ltsc_2024-x64
1UT BR Play...xdelta
windows10-2004-x64
3UT BR Play...xdelta
windows11-ltsc_2024-x64
3General
- Target ut_br_play_as_sans.zip
- Size 3.4MB
- Sample260709-dg65dab17j
- SHA256 fd7a05e266825cc2a538adfc1505fab3abe22a211b9eba26678186ec98de58b6
- MD5 b7653527fcf12a3c1e0bb935fc2f7264
- SHA1 8917a04016790097d950884a867ccaa5111cb9d2
- SHA512 0905c0be4fc6e939aeae8d9734cfbc9aaa82cc831d8c88c2f36466befea84ae4a288666c800cb9c2a44053216bc9cc06bedbb38121e95653d3e79db5f07f7acf
- SSDEEP 98304:dFZcRjyuk3CdZBihOPPFlf2/wTe98u6uCI3+EHJf2joWQjUL2:dFZyTBd3FlfpCmuZ3+SJfWvQjA2
- TLSH T19EF533FF99488362B4FF27872A5EE18BE7E544A687147C4A09D89D24B3F0B89911D40F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ut_br_play_as_sans.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ut_br_play_as_sans.zip
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral3
Sample
DeltaPatcher.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
DeltaPatcher.exe
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral5
Sample
README.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
README.txt
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral7
Sample
UT BR Play as Sans.xdelta
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
UT BR Play as Sans.xdelta
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target ut_br_play_as_sans.zip
- Size 3.4MB
- SHA256 fd7a05e266825cc2a538adfc1505fab3abe22a211b9eba26678186ec98de58b6
- MD5 b7653527fcf12a3c1e0bb935fc2f7264
- SHA1 8917a04016790097d950884a867ccaa5111cb9d2
- SHA512 0905c0be4fc6e939aeae8d9734cfbc9aaa82cc831d8c88c2f36466befea84ae4a288666c800cb9c2a44053216bc9cc06bedbb38121e95653d3e79db5f07f7acf
- SSDEEP 98304:dFZcRjyuk3CdZBihOPPFlf2/wTe98u6uCI3+EHJf2joWQjUL2:dFZyTBd3FlfpCmuZ3+SJfWvQjA2
- TLSH T19EF533FF99488362B4FF27872A5EE18BE7E544A687147C4A09D89D24B3F0B89911D40F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target DeltaPatcher.exe
- Size 5.2MB
- SHA256 348b41189b914caa155b65424df082d9e585dd46d7abca7acada44150b35a04e
- MD5 286fea98ddb5bd973c16b6b420ad3ec0
- SHA1 dfcf050f8b4f0318703163182f1fa3121e48c0c7
- SHA512 fddb4d52afc7c540605ecc9959ad9d944f409e6ab5fb5c144c7e8674bdd03434e214261a5e3be79bc1ed1279ee1afc902543c724a9bae2950334369290abe97c
- SSDEEP 49152:DfdmJTt0KgMo4gelyieeKxJgnFrXidy84pWyzhfYTypMPG9m7Zj2i+MKqXSNoyAg:j5lrQxr8+eaoX/XAHG9zsf
- TLSH T193464A4B32E851E8D0B6D13C8A479912D3B27C16033153EB25D8796B6F3BBE54D3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target README.txt
- Size 1KB
- SHA256 beaf0f40dff3b23cade916c507cd9480532ab283b086b17f9460a64baff433bb
- MD5 94c957163dfdd70c120c2eb65ddc7842
- SHA1 f0aa0f506034049db4b9af7e1d7adb4c0372ed38
- SHA512 c8c977f85e8b0063a2ec3c7dbcd031033af9c1688eb3a39befc93409be9c7721aba22bb7f2a74455aff5f564acb9126168effefbed8feebd1776447ce9418a57
- TLSH T15511006DB02D7268C5202390B70F2D422752B4369E72977628E9C0A47376EA2277818D
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target UT BR Play as Sans.xdelta
- Size 2.0MB
- SHA256 ce4c4aa04684d1fbc9ae72ff8f763f2ff5696477f1f80477a02a52a04f99cb60
- MD5 5d543014f0b01371b6f40b4f24232b38
- SHA1 f22d9bfb047afcda625ecea6aed70f52508bc95d
- SHA512 71c343cb8cfb91e68ef4fad4b1d53d45d9e203134b92d0ca714919ceb94a1937e77977ccd0df96c55be82b56f4de77cf9fe3b2295240e0d79a6dd5f6e2141508
- SSDEEP 24576:zvnPZ/nt98Z+R59SJrov1THogrsrvLeCx19BSb0OHScvveLh+jRmtkFZYzzUyGiu:DFdNOe1TIgAG/nQTGW/qifrbYCpBxGn
- TLSH T15FA5D0AE9A7FF834E1D6E5173CB17525CBA13E4670FE084502B96AC4330663F19DE292
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10