cdmadness.zip
- SHA256 89ed10e6628ffc5a2de1f7b45f8270409839d97170de361ba8a5beb28ec5eb06
Behavioral task
behavioral1
Sample
CDMadness.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
CDMadness.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Help.html
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral4
Sample
Help.html
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
General
- Target cdmadness.zip
- Size 10KB
- Sample260718-pd9a4sa13r
- SHA256 89ed10e6628ffc5a2de1f7b45f8270409839d97170de361ba8a5beb28ec5eb06
- MD5 fc536be50fa60d605b75a13bd2706afc
- SHA1 c86fe24ad907cdee3d8954af685d132ab50465a2
- SHA512 6bfa9efe73acf1b540671749b3e71742a21492e2c2dbf639c6adeaf0508c335363ea485dc29fbc20c7ba444b152321f1fe65487b085e8e692e0b016887dcfaba
- SSDEEP 192:jwLRf0eGKZ8H6mMvG3Pb4hqc2QRjAVwI5BR6eHysimI/P7SkIqmiD5NQNw:UVpGD5Po2QYwCRvHJib75IqdrQNw
- TLSH T16222A04ECD4356E6DC2F97FDD6E3BDAB522A16D5A3CA50B12C4188400F5B99D863701C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/CDMadness.exe upx - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/CDMadness.exe unpack002/out.upx
File Explorer
-
cdmadness.zip.zip 10KB
-
CDMadness.exe.exe 11KB
-
out.upx.exe 18KB
-
Help.html.html 1KB
CDMadness.exe
- SHA256 a696042f4a54d07bd7e016aeebce10cb0eea74d0ddd288e0f7a2700d2bedee7f
- MD5 0bb7d7e68f7f61e45eb4e87d8aaf0993
- SHA1 85c83670970d735c8c27c5728a0656c796e8c410
- SHA512 f5e9d0e36b229f9fb0ef7c8ba4c20d15f573c3f2aae445daf0d6f1dc0e5c1df4e12d489d8732d40866f7912d3b9e6778f3afc711cebc3b33228882ad598d073c
- SSDEEP 192:nmCSfkjARPDKsPf72WR4nYMOhvHJtu1bM0G/:lSHLKs372WinxOhvptu1o0G
- TLSH T17C329E0BA7A33776C4D3D2762FA996657878D5E77D2A1400DB90E91E7DF1201822FC70
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
53072
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
UPX0
Size
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
8KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
out.upx
- SHA256 b15215e37d0321ec7c369f51c3d919653e8aa4544a63eb2fca7865b06e87d0c3
- MD5 d57d2ddef8c5164fbf8603f823534267
- SHA1 f8caa405f318ef382f15f4bef90ab58503ffe4bd
- SHA512 71a29848ebf79f3914be06f31af7b5fa3525a824d2605f4a616d850afd65b429bf17bf8852abf1999ca487e7f1dedf245a581d83680964174a1197c5d37041d8
- SSDEEP 384:WqckeFHq41fS/1szi6a/97yE+xHZRZq7q2tG:/eFHq+S/1szi//hNARX2
- TLSH T1A9823BC7F6D6D972C104DDFC8E26817DEA7F29723E0821669D956DCCCC6A3502A4C086
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15180
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
512B
Virtual Size
196B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Help.html
- SHA256 9051482b60f19c2244966bad8b2033729226caea08e992f2a6966d2f68897f08
- MD5 3927f099aa58b32946a60e9b91d601ee
- SHA1 bcaadd04055e04559119b2a42054ee3fe5d2c106
- SHA512 688383463511e24da6799a5d638151e2fa854ac2edfe2b9475dd187dddd47d9d800c167cac8cb4760e7523add46669deb3f7572179b35199e70e315e4b5adbb7
- TLSH T1493165E7C78BFD92163061F205136A15DCB08107E9960BC3B26D9C1BAB3F2010713BB9
- MD5 SHA1 SHA512 TLSH