General
- Target 240316-wy3sdsgf4x_pw_infected.zip
- Size 251KB
- Sample260720-mkm1cahv2v
- SHA256 21a54370c318f7631d2e928cd27e75d23a4b5e40ca8b536f29fcd55ff3198fe9
- MD5 ba2929838faa153afb3e246b2071d0fc
- SHA1 db450c3ff2c067aafe3eb9c39ad5e59ba00e0183
- SHA512 4c080e96d4c61b7af90489da62c617e2eb2748606fef5ba7410e1a52b1302e57d7fac16e75f71f803fb5cd832b3a78031fa1886824bb0eea7ba43951313f0772
- SSDEEP 6144:fWt00YBHLVl/+7Eok+u8y8Y3AA5+t8I+GWZQSxNxVZH9wa1:fN0YBHLVlUEh+e8Y3At8IOQSxD9wa1
- TLSH T19444238C67BCD36BD9177194A3AE5BA07D77CE80343B676E1C6918ECE40B8F06087589
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MrsMajor 3.0.exe
Resource
win11-20260513-en
10 signatures
900 seconds
Malware Config
Targets
-
- Target MrsMajor 3.0.exe
- Size 381KB
- SHA256 4a75f2db1dbd3c1218bb9994b7e1c690c4edd4e0c1a675de8d2a127611173e69
- MD5 35a27d088cd5be278629fae37d464182
- SHA1 d5a291fadead1f2a0cf35082012fe6f4bf22a3ab
- SHA512 eb0be3026321864bd5bcf53b88dc951711d8c0b4bcbd46800b90ca5116a56dba22452530e29f3ccbbcc43d943bdefc8ed8ca2d31ba2e7e5f0e594f74adba4ab5
- SSDEEP 6144:Th3idhONY259BH1DzJ5PzVNtGgc+F9TBd096cTKAsLEbqqbd+VWM8AHiKn9SlXNA:Th3iXPw9Tc6kVXMHHLEf8l7
- TLSH T1F884AD2272904588C5B5A2BAC611D72AD2713EA51B21D3EB37B57BB73E365818F3C3D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UAC bypass
-
Executes dropped EXE
-
Loads dropped DLL
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Executes a VBScript file via the Windows Script Host.