General
- Target rivals-toolkit.exe
- Size 19.9MB
- Sample260715-ynqfesgy31
- SHA256 5bfdd234f9b2de8d4bff5651644bd7448950cfd4f6fb402f6240122594b5bfdd
- MD5 8f77eaac52999eb29185c70121c6520f
- SHA1 00a73876e149488649ab700fd2d06d82ee9c525d
- SHA512 78df1f660a1f77a12061f8d10d41bfec42cb13735ada2d462198919cab49b7344e2e8bbb16b0d436a39a0b147574235002b4ec53eb24d4ab47db6d45cda6644f
- SSDEEP 196608:/ZYT2sViI1KNFPMHzP2BlKDB+KH6NaaKwR9iQsgZh1:Nsv80HzalFTKwR9iQsg
- TLSH T1CE2718217A5B996CD19AC470834A8A621E2130DB1B36B9FF44D496393F7DBF46F38318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
rivals-toolkit.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target rivals-toolkit.exe
- Size 19.9MB
- SHA256 5bfdd234f9b2de8d4bff5651644bd7448950cfd4f6fb402f6240122594b5bfdd
- MD5 8f77eaac52999eb29185c70121c6520f
- SHA1 00a73876e149488649ab700fd2d06d82ee9c525d
- SHA512 78df1f660a1f77a12061f8d10d41bfec42cb13735ada2d462198919cab49b7344e2e8bbb16b0d436a39a0b147574235002b4ec53eb24d4ab47db6d45cda6644f
- SSDEEP 196608:/ZYT2sViI1KNFPMHzP2BlKDB+KH6NaaKwR9iQsgZh1:Nsv80HzalFTKwR9iQsg
- TLSH T1CE2718217A5B996CD19AC470834A8A621E2130DB1B36B9FF44D496393F7DBF46F38318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.