Overview
overview
8Static
static
3Big52UTF8.exe
windows10-2004-x64
3Big52UTF8.exe
windows11-ltsc_2024-x64
3FtpSlysh.exe
windows10-2004-x64
3FtpSlysh.exe
windows11-ltsc_2024-x64
3sly.exe
windows10-2004-x64
3sly.exe
windows11-ltsc_2024-x64
8taxslysh.doc
windows10-2004-x64
1taxslysh.doc
windows11-ltsc_2024-x64
8General
- Target slyshexe.zip
- Size 7.8MB
- Sample260709-g3yxnset6s
- SHA256 ee3ca9b48ed069f12caa14eecc93b0aa369243def94fdf27390c2a2cb8775da5
- MD5 3bad03ab1d3c6ef20512dbd87456e92b
- SHA1 a67392dd4e98197b5946f0bcb5dca39094f8f667
- SHA512 52ddfb83ab9835539b31a243814be929737c49521c9dcdf2566de1d518721a2a95a2c32fc45d67d28cc53c64152cced33e52253727fc541b285cf3241ed102f7
- SSDEEP 196608:RYkaMW+ImCEvJWn0vAbJzzQcBVdJhUaV9:RYD+ImCEvJWHdzQcBVdTUaV9
- TLSH T1EF8633EBFD0F81A3CC72ABE15AC6DA5C603575669AC02743135283B15B662F3B8CCB45
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Big52UTF8.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Big52UTF8.exe
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral3
Sample
FtpSlysh.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
FtpSlysh.exe
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral5
Sample
sly.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
sly.exe
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral7
Sample
taxslysh.doc
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
taxslysh.doc
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target Big52UTF8.exe
- Size 390KB
- SHA256 afbdc4ed2c2e16c715829f65a1c90cf9c18d3ed4c414f1e57a8e1d0f5d5b0bf9
- MD5 2ed53cf612c83d53aa36972179ff2b72
- SHA1 7a88b9ea3f14922b063034761070fc428b0a48c2
- SHA512 ff7fd162e3694ee73c291e747a47c0c2c1bc55a8f848440908ef16ea4843cfdffa2e53b3a414fa4c2c1f01bd1dd8ee03cc6e13e0fd3eabcab70c579b6a9b25d8
- SSDEEP 6144:/6VQKZPmwuEC7qZo8B6rAtnMN93Sp01cDXHKEtV2mpWm+7HA2CkZula:QQKFm9Emgo84ynkg01crNV23HlXZE
- TLSH T1DD846D26F6E04433C173663D9D5BD7A8AC29BE403E6858467FF81C4C6F397823929297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target FtpSlysh.exe
- Size 554KB
- SHA256 ebba7254bcb4953bae17c4f0f82df7b0f753f901f5f0906912aa579052820ec4
- MD5 6135e9b3a8287627d227b8cc18e4d2ec
- SHA1 169ccb999d26813f8e41d236942d44373561cd43
- SHA512 66533bd6baa18e550f3b22ddc2b3018ed5ccffdc20fd8692be6de28e4f21fe8a860961d5676a40689b4687e0e0839dd54eca14b5832adaf6804d552b229ae501
- SSDEEP 6144:h5+fZ+ekyD7ozswgHT6K8SOZtNBA/ruqAyYQJ3n+ob/PuGaYdVmb5O08R5UQpnrZ:G0fyQpgHTGhNypudYdUmRrwoAJd9KP5
- TLSH T1A0C46D66B2D04837C1776A3CCD5B57946D39BE503E28A8862BF81C4C9F39791383A2D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target sly.exe
- Size 47.7MB
- SHA256 705a4dfecca00b7bc076ae553a56678fb88714d0eb20e0a64a9030df8a49924b
- MD5 d2e6d008636623fb7ca2e01cf5e5d268
- SHA1 6336774b1bf8df7a009d2682fa0d988ab14042ff
- SHA512 b3d3ab800ad529c21336d053f0ebeb895aaea3811516f149fd361adc49a8ef9d76a9ee08e993ff5b60e643be0116fc0fd2e46b1ba900f795cd00e19cecb31e70
- SSDEEP 98304:8lWgNhDlLdR4n0J206kNOwJJntKT6KmHK:3gNVlLdHTBK
- TLSH T17EB7A8980B9448A9C4BDDB3961932611A3FCE1AC12177873B48D6DD50B73E0A8BFFD19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target taxslysh.doc
- Size 796KB
- SHA256 bb00c6e80f0651220f587e06166eee52227a5b1126dec1bdb5d9daa03d656e7c
- MD5 4edf60eece965b8b6122a0be414408e5
- SHA1 2b324cee48e395bfebc8190ea9d0c29ff37c844a
- SHA512 dd75989b25d1af3bb160e0d62430732988c444edc5f50e97851f669a5f383640d84e181d61977c3fd47e46c7caadb77ea3eeb5b58be7e27ebb64f52bbcc235cc
- SSDEEP 12288:X0HjeUXkCnQxaVLhTAZX8QBWr0E1tpUyPjxEN0DXavulsnPBpxfs:X0Hjkl8L+iUylEqvoppxfs
- TLSH T12705DF57FD98C503E81E43791CCEC1F82685FD589C2B988B30A27F5EDD361A81A36938
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.