General
- Target potassium-real-nologin.zip
- Size 42.8MB
- Sample260713-wlgpdsdv2p
- SHA256 5a76826e03f743eedd37a427ebe7004d183c78ab42b0209c134dc0abb650de2b
- MD5 66ad16ebd8be887c755515a47a8a415d
- SHA1 284adff5f60017959d05d7c4ada299a45062a2d5
- SHA512 d36f5686385e34d6f3cf45269a66a22ad13bdd880f57fc028880731ed32903b8723a3cb235ac85eab1a68aa58db4b5b014ebcf3c49130d919e9b827e3c00aa80
- SSDEEP 786432:fmTzjH4/MXLwnrh79AkOK4cf/INKXFS1a+gaDilpKEDn4Ynaq4/:feH4/Xh7mkOsf/fj+6haD/
- TLSH T1E6A733B8D6086098CB076ABE49FA0FC5553F81F7CF6216E3CD24E7595ACE1805BF8606
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
potassium-real-nologin/bin/Potassium.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
potassium-real-nologin/bin/Potassium.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target potassium-real-nologin/bin/Potassium.exe
- Size 16.1MB
- SHA256 796b5692db6292d480a4c8038819b5b99629d45c83535b0fe152789c63e11431
- MD5 29209e080a8f091cb59667be83e7b9cd
- SHA1 e9d9f39206da60ce83135b06ed6349a9609a378d
- SHA512 32548a57de90f9f4140412a0ecfa316aeb8966be5299d8c13768370cdaf645bae3259816e9c539d64b1625f101c3495dd9cca30722a45fd888450556c196c482
- SSDEEP 393216:fD+/T7CllrIcpVSMq/z7NkTAtKHSTJXza7bIh:fSb7ClVIrJ77NkTAtKyTJXzQC
- TLSH T1A20723C26DC5A1D8C4E74E1463CA13CE70F1B6EA49EAAA5E3AC54C035A70FD34D496B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger