General
- Target cyber.exe
- Size 10.7MB
- Sample260711-sd48yads7n
- SHA256 42205c2bcf1defde4ded3a6869435a5235eb103a941f5b33443870d559251f29
- MD5 02212fdd7a3f22b5677dc051e04090bc
- SHA1 77daabd6c5fa8d64ec92b1d662bc971a2379517d
- SHA512 7156d39472727a2cd4decd42608991420a67f6d57d5fafac2bb99cb51a8635b9aefc7057c05a8b31fd7237528e0dee50db0c5accca089bd2497c4a41220aa18f
- SSDEEP 49152:bSxa/tYVXYT/4RUXc0X1KeNoyZZQtcvbIwYTbTMsBzSayk+tmeGfanoSB0TkzOva:bSesA/4RU71vNfkU7CPMufL
- TLSH T14DB6134752AD81E8F166E434195E6613E3B5BC848738DEDB07D04C372FA76E20BBEA11
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
cyber.exe
Resource
win10v2004-20260513-en
23 signatures
150 seconds
Behavioral task
behavioral2
Sample
cyber.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target cyber.exe
- Size 10.7MB
- SHA256 42205c2bcf1defde4ded3a6869435a5235eb103a941f5b33443870d559251f29
- MD5 02212fdd7a3f22b5677dc051e04090bc
- SHA1 77daabd6c5fa8d64ec92b1d662bc971a2379517d
- SHA512 7156d39472727a2cd4decd42608991420a67f6d57d5fafac2bb99cb51a8635b9aefc7057c05a8b31fd7237528e0dee50db0c5accca089bd2497c4a41220aa18f
- SSDEEP 49152:bSxa/tYVXYT/4RUXc0X1KeNoyZZQtcvbIwYTbTMsBzSayk+tmeGfanoSB0TkzOva:bSesA/4RU71vNfkU7CPMufL
- TLSH T14DB6134752AD81E8F166E434195E6613E3B5BC848738DEDB07D04C372FA76E20BBEA11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger