General
- Target Flawless.exe
- Size 33.5MB
- Sample260719-nt3mtsat4l
- SHA256 740555a7c14e4d699e554ff7d42baa1cfba1bdaf7b05452601f75ba542ff5277
- MD5 152b6cf50f1208264590271b588cc740
- SHA1 cbc6b01d8b46eeb46de3121341ae7cae4815ec70
- SHA512 73eab893805c398cb991e297c6b1479532e9404f4827e72c6e1f52bd62bacbef98aa510444167d21463595dd214e4346f2e1e204123da21349538a9dc3440840
- SSDEEP 786432:7KPvzISNvUMOtY8YW8vw1Yfa7KZ6dQs3MGI2AaxgDqFP+0fXp12:7KXzhvUMOtYTWCMya7KZ6LMGI2Az0vpo
- TLSH T196773387A78608DAD8C51A3640CBE9591A91FEA64334C6878FF439550D871ECFE3BF60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
Flawless.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Flawless.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
main.pyc
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
main.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Flawless.exe
- Size 33.5MB
- SHA256 740555a7c14e4d699e554ff7d42baa1cfba1bdaf7b05452601f75ba542ff5277
- MD5 152b6cf50f1208264590271b588cc740
- SHA1 cbc6b01d8b46eeb46de3121341ae7cae4815ec70
- SHA512 73eab893805c398cb991e297c6b1479532e9404f4827e72c6e1f52bd62bacbef98aa510444167d21463595dd214e4346f2e1e204123da21349538a9dc3440840
- SSDEEP 786432:7KPvzISNvUMOtY8YW8vw1Yfa7KZ6dQs3MGI2AaxgDqFP+0fXp12:7KXzhvUMOtYTWCMya7KZ6LMGI2Az0vpo
- TLSH T196773387A78608DAD8C51A3640CBE9591A91FEA64334C6878FF439550D871ECFE3BF60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
Disables one or more Microsoft Defender components
Uses the Powershell Set-MpPreference cmdlet to disable one or more Microsoft Defender components.
Loads dropped DLL
-
- Target main.pyc
- Size 35KB
- SHA256 35bd8823cdfc89462e74147a0a047fbe0852f45d4f3d1e5b1ef90163270763db
- MD5 2a59fed6600c6b362c864eebc9789a5f
- SHA1 45bce7e2613d2a1bad83e536998b6a126eab66d8
- SHA512 669c3348ec56a01d41d5f749fecf47161e3edc517a65dead03278ea1fffcd7b24f34e042dd37df2ff54b88b43dc641037eba45e926b4e7bb2954de7f9f539b90
- SSDEEP 384:gyN3eXllog5oNVZ5010p8lAyvKinqZFo4/5XmZmKoWgdnZaieOJctBFMrlI5PzJ9:gyNQ6SGZ501Aiq/35WToWsoieL9P7
- TLSH T152F2C7892B62D177F9AAF3B168072B0EB775C4F0F211C7032276817A9E92B556C570EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10