1e4415c8e5c2967e7a8986f5689dd364a13a79b9e15afbd10443ba85a7d45d29

Sharing

Copy URL Twitter E-mail

General

Target
assets_20260617_003859.7z
Size 198.5MB
Sample260717-nt39csdy8v
SHA256 1e4415c8e5c2967e7a8986f5689dd364a13a79b9e15afbd10443ba85a7d45d29
MD5 e10d0b198260a30dae488c9e5971867a
SHA1 23317d4285381b7be5c10f4ed614e1da2dcb1112
SHA512 efea53223ff69721ffb4e881be327eebb7ea2f5864cd98a5079c78cca7aa98c3d47f120fe6350207aa050569953a447343609f908ae0e1fed1a062d96c13eb6a
SSDEEP 6291456:dZMep9tOrs8DSVo2tNciOsLgCd2/09jim5R+:dZXX2sG4dDciOmim5R+
TLSH
T1EDA83333C6ED252169878D4CFB0B2557440B595C27B8AE50DC9E8D2C4B73AE9CE6CB2C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  Setup.exe
- Size 44KB
- SHA256 94f4fd6f2cb781ae7839ad2ee0322df732c8c7297e62834457662f8cde29dcbb
- MD5 f86507ff0856923a8686d869bbd0aa55
- SHA1 d561b9cdbba69fdafb08af428033c4aa506802f8
- SHA512 6c1c073fc09498407b2c6b46d7a7e04c2db3c6f8d68c0dc0775211864c4508c48c2bd92e3849dc3805caacc856f9e31e1eea118661a55f526bfa61638f88c3da
- SSDEEP 384:RozxIpl4504JaAystntGecMJ6gjpS1BO2NjrLVXjW9VBhKigecicWwnWzYDTFu:Rg04PGeZQG2NDVXjWLu1imL
- TLSH
  T10413299DABE018EAF016523FCD93465AA672F6106B2207CF07C4856E0E32BD6DD35BD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery execution
- Modifies boot configuration data using bcdedit
behavioral1
- Target
  data/7za.dll
- Size 284KB
- SHA256 a05490eea8ce1484cd15302c65803414ee7227fcbdf1a1ed2d4243f583f957df
- MD5 a608e5fb266a10174235da5c6d396769
- SHA1 85526701342f9db479578d08a3599cec2e8be321
- SHA512 9e4f4c45e5be9faa7c754dc646213d3a7eb862b9fade96437f285c7d571b96fc3577e12f3768ae88902c52bda2ac3d1976adc32e7145766ea66c50af303efdd5
- SSDEEP 6144:Rm3x2iT42LpOe4+5r7R/nV+yqwBey/M6Yijgzj9Pq7MXJzS/8aN:Rm3x2ik2LF1fIEM6GP9C7MRa
- TLSH
  T1D454BF21F7F6C0F9D24A1130AA1CBBB645F9E3490B20D9D3A3D0DE596E325E2D23D619
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2 behavioral3
- Target
  data/7za.exe
- Size 828KB
- SHA256 cf878bfbd9ed93dc551ac038aff8a8bba4c935ddf8d48e62122bddfdb3e08567
- MD5 426ccb645e50a3143811cfa0e42e2ba6
- SHA1 3c17e212a5fdf25847bc895460f55819bf48b11d
- SHA512 1ab13e8e6e0ca4ca2039f104d53a5286c4196e930319c4fe374fa3bf415214bb7c7d2a9d8ca677a29c911a356cca19a1cecae16dd4bf840bce725f20de4c8ff2
- SSDEEP 24576:b82Iz/8J9oDionNtypHq6geLmUB1HXBxCbx5MwRv8:bBYUzoDtiqELmW6nR8
- TLSH
  T1F9059E12BBE5D07BD2421131CB1D7BF591F993680B2148C767808F6D7B319D2EA3AA1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4 behavioral5
- Target
  data/Microsoft.Management.Infrastructure.Native.dll
- Size 64KB
- SHA256 2a3d30b4a2bcc2b42f560eb0bbfb98b3b68422577f1505da50826c13bac28b4d
- MD5 7ccd5ed09aa7b224b142cad8ff3643e7
- SHA1 f9cdf990d2cf621a7cba9b2e861ceae907458299
- SHA512 ada9199a38f0023e4089da494dfe65eb6c8aeef5312c328b5534d47be730503c2395106a58277fb59828592fef33b68675dee59112c34f3be79147d6547073f5
- SSDEEP 1536:Fvk0IswbHViiihiRiVR+m4M5rWgm6DL294E:20qViiihiRiVR+m4M5rWgrL2
- TLSH
  T17C53E79133E12792C6ABCF36B0705D45DB21D3869AC717D344C922FC98CAB0D6B6F962
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  data/Microsoft.Management.Infrastructure.dll
- Size 45KB
- SHA256 3770c18cd8380e00af4c09dfbbb51f4ca33428efc73f7b4da8adc49ed5d3e111
- MD5 07a556f59dde2c223e33cbb80e9cc8c6
- SHA1 d8f1f4f21d9e45b7bf8e27a8df4f2b63b030daa0
- SHA512 0d8f077814bfb451c5989b0533111737dd10821189c4173aaaea29d2863af5d7caf71928b29a4fa68e0e7c7dc3243fb8ca642448dce630bc00d9ffffbfaa4eb9
- SSDEEP 768:hBUUkCKQcy+Uq+WuWuoqXcDg3rTAYLc5rqdaSs:hBUUkuX+pmcDMQYLc5rqdA
- TLSH
  T171230A00D3958B5ACCCF9637F41926763738E34896034B1FB90C25A6798F72E7B93998
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  data/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  data/System.Management.Automation.dll
- Size 1.5MB
- SHA256 307ccddbb3e9bcecb540512078fe9dd017f66317923a396e78fd2d5f2977d7f0
- MD5 043aec01df5f9a11bb95595d294d0e7f
- SHA1 375d41e2524f0d3deced2e5d366da865d40ca4cf
- SHA512 c69a66726ffa8f41b9e0322e2210b6f7db67238804cb8d958af8598da4c2118f4a09c38a399b123f33b9a198aed6a869a520942092c7cfad1628b5525172f039
- SSDEEP 49152:AmvuOgsHT7+a56osK5RDvXcSGukSaxPaSknx:z
- TLSH
  T1AC7518119B629F6FC0D7423AF4A201307A72CA5A3733924B5E5D263D1EDF7443BA2B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  data/cacert/LICENSE.url
- Size 73B
- SHA256 b9954f88a27e8457cefcebd076fa533d037711383f6b28ae489d063ef8c61f79
- MD5 d4eeff46fd41c739e4653431fe2511c1
- SHA1 f0e013b1593394cf7bb0bc770a7cfc9b2ff95aba
- SHA512 c0d809e8e561f19a9629931cda0bd8be8c8b919d6926fd63b50512919637a9ee676369d546744f5d1d7aade58dac8f55d23e2421dd24f255ec033ca3f5b001a6
- TLSH
  T120A022F3E20CC0088303CE0CF030E800880F2CA28AA3FC80B088AA8F08C208002CC208
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral14 behavioral15
- Target
  data/curl/system.h
- Size 18KB
- SHA256 9eec4a36e131b02b793278fdf1975c50cdfa551d7d5fa8036a65c2254582530f
- MD5 90bbc243ef15033a186b3e32cead7008
- SHA1 91bfea075721a71211e920f5ab26d68291924246
- SHA512 08e117be36c70d7747428c0adba17844699ddc805efc8abff300ffe34b8f60a36e6bf7ced4ca7b64925f34d599325c2230ff0dad9092144b6a74c8abfcc59259
- SSDEEP 384:jseODo9QIsTqF6TOzbKQYH/nFkhRMw4BgqfWyj3xwZ4MMp3V1n+Xg5ZvZStfSqwh:jJW5b
- TLSH
  T1A082AB811E9B989481E69521704C59EB83C08A73F1103EE1B1BF988C9F4D625F5E7EFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  data/gkcode.dll
- Size 10.0MB
- SHA256 fda96c1bb36dc70981ed5dc0727e54baa0b474b8e18cc139efe73fa97c3900d2
- MD5 acc99a7c7ce2a3b8b378c2b575b44548
- SHA1 ba2f248f07e250fca64c4ee48c3f61bdbd0213c1
- SHA512 f8b3d84898fbda3feeeba0ebce4b0c9234201e3fe46bbd9aa281027327804fa17b10476277106d36700ac1690016b8bf0570861c2941279387e4a7c821f2afff
- SSDEEP 98304:rRkQUc42qGfVezsEsEsc2L125mqaphFhzXroAWFrr2fgOOtVpaxQg9ICq:rWRJ2PfVeD2L125mz7hfgOOtVcxNJq
- TLSH
  T15EB67D8EF26361B8D51BCCB4427EAB12B918345E83145AF727D95A343AB3BC05B39F14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  data/gkcodecs.dll
- Size 10.0MB
- SHA256 fda96c1bb36dc70981ed5dc0727e54baa0b474b8e18cc139efe73fa97c3900d2
- MD5 acc99a7c7ce2a3b8b378c2b575b44548
- SHA1 ba2f248f07e250fca64c4ee48c3f61bdbd0213c1
- SHA512 f8b3d84898fbda3feeeba0ebce4b0c9234201e3fe46bbd9aa281027327804fa17b10476277106d36700ac1690016b8bf0570861c2941279387e4a7c821f2afff
- SSDEEP 98304:rRkQUc42qGfVezsEsEsc2L125mqaphFhzXroAWFrr2fgOOtVpaxQg9ICq:rWRJ2PfVeD2L125mz7hfgOOtVcxNJq
- TLSH
  T15EB67D8EF26361B8D51BCCB4427EAB12B918345E83145AF727D95A343AB3BC05B39F14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  data/gkv.dll
- Size 73.4MB
- SHA256 fdbb45121aebb8c4f888bb5b78a1d6fd2de2d29df9f21c10d3e146c26448cd06
- MD5 e85ede9da3ae5e773f30fd42f880d3c5
- SHA1 933030c3a406b55a0c0b82998322d2a202fd7da4
- SHA512 7c113412cd7e31f793b1f6e56d482a5de12b6fd22e70120b44bcb7c3ea40c214b6351b504368f1945fcadc56a5a2ad369e101cf7b0a943903713d419003ec262
- SSDEEP 1572864:nag0wfRLdO6HrqF9xtUaHhWadApEjoNB7dZo1rbgQiW5492pBgk:na2O6HmF9vUacoegov7dq1rbtiqmW
- TLSH
  T1B4F7338277FE621BCD705731D9F243043275DAB14A6743CB9E9ECAAA6C79298FE500D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  data/libGLESv2.dll
- Size 5.8MB
- SHA256 b3ccc359f0b9c33c67c6f0315e3a9891581a2f47fe1eef6d45f44cc1eb6656be
- MD5 b4cf355239c83271646aec203e312587
- SHA1 28dc20b20a105dad4983950acdfeba104c53b93f
- SHA512 1e719152420029293c6dad14cb1081a74ce82685ae8bd974afedc2662843604efbbe1d2410a9276eb37fab1682c65fbbc7e4d8a736e13e16b7a25bd273955804
- SSDEEP 49152:8luj304D9oiJiiupn2ZQxT7FYzE/Y0etsHVf6aGkyk5R6pBh7rcCddvO2/kAJ5lQ:eQcJ/Y0dGfr73k9
- TLSH
  T15B567D53F28251EDC419D2B9C74BA322F631BC495724BADF265453202F71BE0BB7AB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  data/libbrotlicommon.a
- Size 131KB
- SHA256 1c6a6ff41a2a1ec0bfe8bdfe8e27127fce59e16df88e0b9060e63b11e0a9ddaf
- MD5 f6f075717726d400c4303f20d8ec6af3
- SHA1 82faf929e85d99589be8d006f7c5f2563ea29f6b
- SHA512 06fefab5a9b8e1e08ee5fd2c359f191e924896593ac70a093765844ebe9218e652f9ec172419e5dbafc4766cabce9aea8d7e5ef4634da3a777f85d9aceca5e4a
- SSDEEP 3072:O4lzbWhNbNL8DXGvVh73pbi0tdpvGJaoZB7PxBX91HU:O4AhdNorGvHdbi09GJR910
- TLSH
  T1FAD37CA1F3050736C22B227AE49A67B9F33582B497670511B4AD066D21C3CA4873F7FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral26 behavioral27
- Target
  data/mscorlib.dll
- Size 5.4MB
- SHA256 c1700fa946ea2e36bb69f266a6af5328d9e3a59c7445c6955fc051272f6f4eed
- MD5 8962d51c16f28e58b7d76816dc339901
- SHA1 0ccb879a7cb9e642799b989d5a46028b861494b4
- SHA512 2f1d63b576bb473a30fbce5952d630050315c1dac7684e8cfb4a594f40848e33271e99c27d8981512369bb992a164c33f5c376df6533c6cd3378fa8462fda2a9
- SSDEEP 49152:/M9zgT6tSSTpw9EjwQR2ruLuRnOG7v1zbT4A8KfhKsXQCImR7A3uF92j9sk/IRUU:b6kSTpwC2ru6D1zUOhm3VWg4s8T
- TLSH
  T112466C01A7F89F35F6AB5F3B94B6540856F3FC582713870E350AA62A9C537A04E437A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28 behavioral29
- Target
  data/mscorrc.dll
- Size 389KB
- SHA256 de6d8d472c0c21aedee69bceaf3e3419dc831825f72d1be201cbaec413a164a7
- MD5 8a960d8c91014fd1d36b7b8e067ccd7f
- SHA1 62a67606bd4a0bd5355b68cf7616979c2db346c3
- SHA512 64897b46c607a48c53a7a7b6ce1e4f1ad03ca8f48d139a2ff86189756ca90b773970b24b5e5d37b84b8b732a8fae78f967e012f0e2b43f47d7d4fb9875140e2f
- SSDEEP 3072:PZwZetSqwtRRWIREvu/S3lZkWVYWxinPhN9OnTJzSeU5mfEwj:PFSrtRRbsfkR9OTJzSb+
- TLSH
  T119845391A7F95218F6F73B74ADB95AA00E7ABC96EC79C21D1240805E5D72E40CDB0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  data/ngtcp2/7za.dll
- Size 284KB
- SHA256 a05490eea8ce1484cd15302c65803414ee7227fcbdf1a1ed2d4243f583f957df
- MD5 a608e5fb266a10174235da5c6d396769
- SHA1 85526701342f9db479578d08a3599cec2e8be321
- SHA512 9e4f4c45e5be9faa7c754dc646213d3a7eb862b9fade96437f285c7d571b96fc3577e12f3768ae88902c52bda2ac3d1976adc32e7145766ea66c50af303efdd5
- SSDEEP 6144:Rm3x2iT42LpOe4+5r7R/nV+yqwBey/M6Yijgzj9Pq7MXJzS/8aN:Rm3x2ik2LF1fIEM6GP9C7MRa
- TLSH
  T1D454BF21F7F6C0F9D24A1130AA1CBBB645F9E3490B20D9D3A3D0DE596E325E2D23D619
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Modifies boot configuration data using bcdedit

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32