General
- Target AntiSSTool-O9R2B0E4.exe
- Size 35.6MB
- Sample260719-2m7j4aev6n
- SHA256 8b00baac3801fa521c170b334cf3d7b9797bb11d15bab6e507b50aa781940e10
- MD5 4370a447c95203e21d67716c981f5879
- SHA1 6dadef50c49dc9041b2dd1aef0699d380cf2e620
- SHA512 41b2703c804bcaa7dd088b33347027f8db9185d65298d7bacaf3ea339448d2cd2a0476aaef47983a4d5e23e023f8341f3fcfea5ab7d8561518162de90c00a20e
- SSDEEP 786432:jYXIgFeNQRgkvSdV2BO3SYmjrAZfDziaArnddf0eMl5lCtGM5pI6e:FU9RgkvSd0O3AAVPUnfs0xvH
- TLSH T14B8733B610C16AC6C131CE3985CD686DF06FBECE6C20DD5A7A8A3A449DBD5B5F421C23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AntiSSTool-O9R2B0E4.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
AntiSSTool-O9R2B0E4.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target AntiSSTool-O9R2B0E4.exe
- Size 35.6MB
- SHA256 8b00baac3801fa521c170b334cf3d7b9797bb11d15bab6e507b50aa781940e10
- MD5 4370a447c95203e21d67716c981f5879
- SHA1 6dadef50c49dc9041b2dd1aef0699d380cf2e620
- SHA512 41b2703c804bcaa7dd088b33347027f8db9185d65298d7bacaf3ea339448d2cd2a0476aaef47983a4d5e23e023f8341f3fcfea5ab7d8561518162de90c00a20e
- SSDEEP 786432:jYXIgFeNQRgkvSdV2BO3SYmjrAZfDziaArnddf0eMl5lCtGM5pI6e:FU9RgkvSd0O3AAVPUnfs0xvH
- TLSH T14B8733B610C16AC6C131CE3985CD686DF06FBECE6C20DD5A7A8A3A449DBD5B5F421C23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Stops running service(s)
-
Suspicious use of NtSetInformationThreadHideFromDebugger