General
- Target d4ecaf00d4fad4bb1caeea2a8998765552b4633dd415d4842a90aef19deaa1ce
- Size 12.3MB
- Sample260719-3vb9labx2t
- SHA256 d4ecaf00d4fad4bb1caeea2a8998765552b4633dd415d4842a90aef19deaa1ce
- MD5 edb36f0b073880c0839bbfc52a47d9ea
- SHA1 ce9096cabd391217da3ca77b57c790183572551c
- SHA512 7ccb719803eba4e9636b94b94e16927c92dc564b5501ef13e6e8ec1c961ea55b27d969cff26c4c83a37e124547b203801f1ff70ccb06a7d98a6cfa72a238f648
- SSDEEP 24576:PaNVQoOX+qokswDmF9UDiMHvAHjHnTwXOfQStvsaNVQoOX+qokswDmF9UDiMHvAv:PaNVrqok7aNVrqok
- TLSH T1C0D6E955E752A3A0DB878B698141C4CD71B4AC5579BDD8CFBCACF202C0B66E91ED038B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d4ecaf00d4fad4bb1caeea2a8998765552b4633dd415d4842a90aef19deaa1ce.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
d4ecaf00d4fad4bb1caeea2a8998765552b4633dd415d4842a90aef19deaa1ce.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target d4ecaf00d4fad4bb1caeea2a8998765552b4633dd415d4842a90aef19deaa1ce
- Size 12.3MB
- SHA256 d4ecaf00d4fad4bb1caeea2a8998765552b4633dd415d4842a90aef19deaa1ce
- MD5 edb36f0b073880c0839bbfc52a47d9ea
- SHA1 ce9096cabd391217da3ca77b57c790183572551c
- SHA512 7ccb719803eba4e9636b94b94e16927c92dc564b5501ef13e6e8ec1c961ea55b27d969cff26c4c83a37e124547b203801f1ff70ccb06a7d98a6cfa72a238f648
- SSDEEP 24576:PaNVQoOX+qokswDmF9UDiMHvAHjHnTwXOfQStvsaNVQoOX+qokswDmF9UDiMHvAv:PaNVrqok7aNVrqok
- TLSH T1C0D6E955E752A3A0DB878B698141C4CD71B4AC5579BDD8CFBCACF202C0B66E91ED038B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Creates new service(s)
-
Executes dropped EXE