General
- Target EasyBin.zip
- Size 69.4MB
- Sample260720-w79x3aby5l
- SHA256 f24454d5baf522bddeb8ebcbe938377d166bda6a5e64eabc3f3bb73c017ba4c0
- MD5 8427da86ae00200a925b5a1693647e99
- SHA1 ea75e753a69846fc72938d64013744da59f0fc65
- SHA512 46dc79edda6a6af353bd5096eac06714e9e68c000edf6d60cdb1164598ceb0e97bb1813099ae9c552903e624ef793c5b4dce46075253661c0d3fbfea9d0ff560
- SSDEEP 1572864:K7Wwg+3dZczyL2AgdB9Dhu0rg/CQKh57BqZI8sTovfELETWc/Ix:mt3deGL2PnVuRCFhZD8sEvxb/Ix
- TLSH T1D1F733B5DB1E86F7503B563CE22CC980E79A93168957863A5CF68772E0C73E0D0AF941
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
EasyBin/EasyLaunch.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
EasyBin/EasyLaunch.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Behavioral task
behavioral3
Sample
EasyBin/data/build_2.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
EasyBin/data/build_2.dll
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
EasyBin/data/build_25.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
EasyBin/data/build_25.dll
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target EasyBin/EasyLaunch.exe
- Size 78.1MB
- SHA256 6ac1f895cf6b5b2a54ed2e75bf045c2542aa98e6a5fa738587f4b1a82adb225b
- MD5 cbec21f09a8622109b984215e6fd54fe
- SHA1 91ad6d0df4f7df15e78c0767fbe7a2e78ab05185
- SHA512 aecc2a497bc1e87d36d133000a226558f5876c9a88e6a1f14e2972d5f9e3cf849db0b832c2affda4827ba8b39f07e419495f09a3d54f32209c2cef0cb5a7f4f7
- SSDEEP 393216:QFmNYSYZXCpixyZbvJVANEEgC/Kyxf663DQu58EASEhoIaE2lShBujCm5w1PN3hM:QrHx8iQJhYWuhvYvxOOxe3
- TLSH T110086B4667EA04D4F9F79A749AE66213C673BC063F3095CF3208172A1F736E09976722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
Enumerates processes with tasklist
-
- Target EasyBin/data/build_2.dll
- Size 926KB
- SHA256 6064d20d4bc4bcf7deaf3c43ff5c25046f48786d39252b6068ae64b961e0c471
- MD5 b8a856b880f7ff38cd7312d0665f5da1
- SHA1 4212848fd4bc4c7dcb95115da7037c5b17286c7c
- SHA512 afcb42abe3ef726a99b20c6c04618d4ab50ad24c08af5d7bb4c65ad1202d6a9801d90c8e0b0c1e5ffc5b070f24418bf1b16c3fc3c831a25f8dd5776ab82e8406
- SSDEEP 24576:r9r8/Uxh8au3+HhRT9f14xccrE2tbXx6TIlZl/Z:rG/Zau3+Hr9fM9E6NRnx
- TLSH T1A1153393BDBB36E745623536FAAF66C1301066381F6145768A5EDC53CDB2CB089F8A03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target EasyBin/data/build_25.dll
- Size 771KB
- SHA256 4df82bf1575ce59e2db65396b306d506ae66dfa5027f89b10399db24556ff09a
- MD5 602da447fcf558778d4c7f502c86576e
- SHA1 dd17b36e0c1989791f3ac9c434d3e12c869f6192
- SHA512 109b4687e3a987e71da7d001e6c531b7d431a0c3fc76bcfb39a700f6db4725ac0b3778c44bf772b23882f707f4db18bafbd461d198ea81537d3cfb9556f6ec7b
- SSDEEP 24576:xQz0rduOrhwHC2SA44RJikeTtgvTWjA8FoG:x40puOtwrSA3vikQgbWjA8FoG
- TLSH T144F433F2F548C5F0611701ACBE1F927C4222AD3A4E50E3B14EB14E62D59B172ABDC6DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10