General
- Target something.exe
- Size 5.2MB
- Sample260713-d4zc2sdw71
- SHA256 4cb1169006d35116927e34dd4eb6a6aa40cc98110e061699ff6048387638b950
- MD5 1d2253586cd8ace2f0fc78bdc024c4eb
- SHA1 b430e33ab72b3ce0e6fa5f6ac44cad48c3968ce6
- SHA512 a92f262a72b974244b62cb8a317d50483de622f5db161518763783e55fd05b46a879a5994b63a499a6740440fca59774439ab5bbe5e7126fba9707d049a78e59
- SSDEEP 49152:zPnMSvtc+mu248DxThY7B1utCeCujwK6POHC/VucoQqspHZq1db5MdH/j3pdE840:Hvt2kuzXloVNCspWM5PEtLi3rsZ
- TLSH T1A346D092F3E455EAD436A0388696572BF3767518032087DB7BC51A2D6F63BE01F3AB40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
something.exe
Resource
win10v2004-20260513-en
23 signatures
150 seconds
Behavioral task
behavioral2
Sample
something.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target something.exe
- Size 5.2MB
- SHA256 4cb1169006d35116927e34dd4eb6a6aa40cc98110e061699ff6048387638b950
- MD5 1d2253586cd8ace2f0fc78bdc024c4eb
- SHA1 b430e33ab72b3ce0e6fa5f6ac44cad48c3968ce6
- SHA512 a92f262a72b974244b62cb8a317d50483de622f5db161518763783e55fd05b46a879a5994b63a499a6740440fca59774439ab5bbe5e7126fba9707d049a78e59
- SSDEEP 49152:zPnMSvtc+mu248DxThY7B1utCeCujwK6POHC/VucoQqspHZq1db5MdH/j3pdE840:Hvt2kuzXloVNCspWM5PEtLi3rsZ
- TLSH T1A346D092F3E455EAD436A0388696572BF3767518032087DB7BC51A2D6F63BE01F3AB40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger