General
- Target nevoeiro_rename.zip
- Size 673.8MB
- Sample260713-vlfxesct9n
- SHA256 72d89bbbc691a2034005daef60bb5cb8f372697846c9395e1852f62b39b8d9bf
- MD5 a45516c4b66e5db1590272373d8790fb
- SHA1 f6ded94fbc3c24c59fa21a81f14333c0da2b11a6
- SHA512 84c4545e762aae7a0846ae91a2b33dbbdba71c26a1c961ad6eb59666f4165cba5df1b663df9d2b3ea00b530df2f286708d2f2868870acb7a9baa7ef739b253f4
- SSDEEP 12582912:DuixQhU56pxmbYpUXRTPjZRyuAAyLKTE/ps/yWZtwoRQ2U0XJUwh:pxQveh1ZRKAyeTE/O/yakCh
- TLSH T136793317798680BFD0821E3AE93BA7D5273B76711F468C676BC0250CAE75FA1243E643
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
banking_trojan2.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
banking_trojan2.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
rundll32.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
rundll32.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target banking_trojan2.dll
- Size 673.8MB
- SHA256 94b0684d0dcd7dc59a7194f0b4cb2c1df9b6c3063e394068e021ccda96d6d30e
- MD5 9bf00e124e09988eb803f4c87583d2a9
- SHA1 1d6aaba6b98b615dee7a3cfd4f98f7867866d896
- SHA512 d33f49294ba53a9f23eff38abaf750b2d746fe2292ab9fe05c52ff76884d3b64ec7124cb1ab68fdb19fa78ffda6fcbe784f1dc94e0a3f776eaa5be4781c48b77
- SSDEEP 12582912:MuixQhU56pxmbYpUXRTPjZRyuAAyLKTE/ps/yWZtwoRQ2U0XJUw:exQveh1ZRKAyeTE/O/yakC
- TLSH T129793317798680BFD0821E3AE93BA7D5273B76711F468C676BC0250CAE75FA1243E643
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target rundll32.exe
- Size 20KB
- SHA256 2b62294728b6c2463255ed96579e4769cdd6ad6acedbfb0c45157949e4f0f76d
- MD5 33b2cadb2ab6d8fc5820f72358586522
- SHA1 fa52a3c01405f8e06c3afb9d0aa7daa9a45dd885
- SHA512 625b2ea0921094b11a8447e205d3dcfb5ef41fed78a7aa22a4d7660d091769598db911c2a1416885901c2d77642fcb5237c7ae91f3775c5cd6d888339bf5520b
- SSDEEP 384:5W26GILvkwbdI5nGIywC1+/Ua+mNNNp5zwHcPuZ:56pw+dI5GIywC1XaxNr5zwwuZ
- TLSH T11F92EA16F20385AACC33B3B1C1D7D67EE661A64885621C5FFF270E18B63A6015D36367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10Suspicious use of NtSetInformationThreadHideFromDebugger