General
- Target New Quote.exe
- Size 1.1MB
- Sample260720-pgbt1shx7p
- SHA256 256ef225565388227fd67c6e4a8c6e1990df8f660fb4504813c31bd57d9269cb
- MD5 78fd5a813173323ab23bf02192496c9e
- SHA1 63ee17dacdf50aaa4f49c6fc86c82f6afa73faca
- SHA512 b2a6b06fdfedb7c41373f542dabf12f80815b9073ec037b86a5b1ac4d3bc561564cd0ffcc1b6b9b9f2325182d2e49a153530049e9aa7c24d325f5d99519fbfc6
- SSDEEP 12288:pUq7p14OFyLHK9Jwe4ezKWusA8Z2vjtxIcYzLzCZeGRpQ6s7EwKz4RH6uG/dD:3UOF8HKLZ4e2sAh8cYHliKkzyv0
- TLSH T17445F11A13D4AA68E4FEA73157B4001147F2F80B9736D71E6D4C50EE5F32B829A66B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
New Quote.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target New Quote.exe
- Size 1.1MB
- SHA256 256ef225565388227fd67c6e4a8c6e1990df8f660fb4504813c31bd57d9269cb
- MD5 78fd5a813173323ab23bf02192496c9e
- SHA1 63ee17dacdf50aaa4f49c6fc86c82f6afa73faca
- SHA512 b2a6b06fdfedb7c41373f542dabf12f80815b9073ec037b86a5b1ac4d3bc561564cd0ffcc1b6b9b9f2325182d2e49a153530049e9aa7c24d325f5d99519fbfc6
- SSDEEP 12288:pUq7p14OFyLHK9Jwe4ezKWusA8Z2vjtxIcYzLzCZeGRpQ6s7EwKz4RH6uG/dD:3UOF8HKLZ4e2sAh8cYHliKkzyv0
- TLSH T17445F11A13D4AA68E4FEA73157B4001147F2F80B9736D71E6D4C50EE5F32B829A66B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Formbook payload
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Suspicious use of SetThreadContext