General
- Target aimwarecs2.exe
- Size 25.6MB
- Sample260710-r282csdw2z
- SHA256 a851538c2061e6c52f78a08474055ad71e1e5367c2341641161ae0315ac7e4b6
- MD5 6f053b576f0d30db7b3a2fbe71ac9298
- SHA1 1a59837b12bfd7c9f1bf875a5805d3463e159676
- SHA512 30173afda63da39e41adbb69e8f63f64e9e31e9ee65f42b671cf375c41bd2377eaa83857159696c049460a241d764c0f195092dc48e4600d34e35d88ec242220
- SSDEEP 786432:Z+bRLxVXuOCr6JrrGrKQ0IgSYbNZhUul:ZGjaGp5Q09SY5Uul
- TLSH T1534723D268D562F4E3D74F0882C7228F939135E79BA7970E25C4DC032A61E978E45E3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aimwarecs2.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
aimwarecs2.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target aimwarecs2.exe
- Size 25.6MB
- SHA256 a851538c2061e6c52f78a08474055ad71e1e5367c2341641161ae0315ac7e4b6
- MD5 6f053b576f0d30db7b3a2fbe71ac9298
- SHA1 1a59837b12bfd7c9f1bf875a5805d3463e159676
- SHA512 30173afda63da39e41adbb69e8f63f64e9e31e9ee65f42b671cf375c41bd2377eaa83857159696c049460a241d764c0f195092dc48e4600d34e35d88ec242220
- SSDEEP 786432:Z+bRLxVXuOCr6JrrGrKQ0IgSYbNZhUul:ZGjaGp5Q09SY5Uul
- TLSH T1534723D268D562F4E3D74F0882C7228F939135E79BA7970E25C4DC032A61E978E45E3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger