General
- Target Xfer.Records.LFOTool.v1.762.7z
- Size 13.7MB
- Sample260715-md58cads7t
- SHA256 b75408235a6f48eaa3efadab99602e0dc298d5e537d342663f52c5d8418f3a29
- MD5 5bf07e7a25a33b9892bee89abd6e4f26
- SHA1 559fa88b715c65d018db79e77cc26bf49ccb8ace
- SHA512 bae3f972640963c1145d9d6779822f91b4221e15c08ef902c7cef1447cff48a5fe23cd8e2ecde6ccc296598e45b45fc7064c3c8a8bca0c0b6daa70f1962c429d
- SSDEEP 393216:lRwbP4q+2D2uemUbHR56pPUo7jY9Ty5iJJD:geunOR5+PnY9TZD
- TLSH T190E6337571EB754DEB42C7A5E11429887B76AB17D160D028BDFBC23280013ABA36EF35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
Xfer.Records.LFOTool.v1.762.7z
Resource
win10v2004-20260513-en
9 signatures
900 seconds
Behavioral task
behavioral2
Sample
Xfer.Records.LFOTool.v1.762.7z
Resource
win11ltsc2024-20260709-en
11 signatures
900 seconds
Malware Config
Targets
-
- Target Xfer.Records.LFOTool.v1.762.7z
- Size 13.7MB
- SHA256 b75408235a6f48eaa3efadab99602e0dc298d5e537d342663f52c5d8418f3a29
- MD5 5bf07e7a25a33b9892bee89abd6e4f26
- SHA1 559fa88b715c65d018db79e77cc26bf49ccb8ace
- SHA512 bae3f972640963c1145d9d6779822f91b4221e15c08ef902c7cef1447cff48a5fe23cd8e2ecde6ccc296598e45b45fc7064c3c8a8bca0c0b6daa70f1962c429d
- SSDEEP 393216:lRwbP4q+2D2uemUbHR56pPUo7jY9Ty5iJJD:geunOR5+PnY9TZD
- TLSH T190E6337571EB754DEB42C7A5E11429887B76AB17D160D028BDFBC23280013ABA36EF35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.