General
- Target mrjohn_staged_1.2026.0621.0004.exe
- Size 10.4MB
- Sample260713-cfmtnsa15m
- SHA256 2cbdd694a3babbb6666f54d42f58ca19f73404222eaf80c43a9bf249477f0b2f
- MD5 05f2066449c2d2798114021a0b335721
- SHA1 26cb0030d8190b86bfbe409dada7223ae6b25a91
- SHA512 a5a5e92f827b9bab81656e38a8380752555559b9a1d9a2301ccb0a8bff250a7f647411071e476f79624dce1f5a34492148383b1af00b56c857681c2e9b69418e
- SSDEEP 196608:9GABQPyZRbcLDlTaGKLXsmWAHo3k0WaOVbhKE:IAnmpTavXLpYkLBbQ
- TLSH T1BAB62322E69800FCD162C2B9CA565947EB7278460370EDCF03E05A562F677F45E7EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
mrjohn_staged_1.2026.0621.0004.exe
Resource
win10ltsc2021-20260513-en
5 signatures
300 seconds
Malware Config
Targets
-
- Target mrjohn_staged_1.2026.0621.0004.exe
- Size 10.4MB
- SHA256 2cbdd694a3babbb6666f54d42f58ca19f73404222eaf80c43a9bf249477f0b2f
- MD5 05f2066449c2d2798114021a0b335721
- SHA1 26cb0030d8190b86bfbe409dada7223ae6b25a91
- SHA512 a5a5e92f827b9bab81656e38a8380752555559b9a1d9a2301ccb0a8bff250a7f647411071e476f79624dce1f5a34492148383b1af00b56c857681c2e9b69418e
- SSDEEP 196608:9GABQPyZRbcLDlTaGKLXsmWAHo3k0WaOVbhKE:IAnmpTavXLpYkLBbQ
- TLSH T1BAB62322E69800FCD162C2B9CA565947EB7278460370EDCF03E05A562F677F45E7EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger