General
- Target HeavenSwitch.exe
- Size 5.4MB
- Sample260721-24btragc25
- SHA256 4481d34ff4a92f1966d297e83c82691d08e3b67aa98acb54a209319e5def4302
- MD5 46b932cd845904332e0bff6e28d69f3e
- SHA1 75ebdb05a5d001ab52fd65b4d8b4cf56cd924dcf
- SHA512 b1b0c1be02d8f50cbcfc68670b1739c6c69bb576e5480ddda77dcb946c65f381924174f5c4c7cc92305aca220ede25db7fcf44149d75bba2103ba627ddcd31f9
- SSDEEP 98304:9k5p96948zvEdHr8RGxBv9OW/sBtq8QkpouHg/tphqq19nOac3CzPoZ3Nr7:9kb96e8oZ8yvsWCqZkpVHg1vVCyzPYN
- TLSH T1164633D021DF18B9D018C2706BC7A5ACF56D72EB8EF85D286B28530AFD6DC468CE3645
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HeavenSwitch.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
HeavenSwitch.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target HeavenSwitch.exe
- Size 5.4MB
- SHA256 4481d34ff4a92f1966d297e83c82691d08e3b67aa98acb54a209319e5def4302
- MD5 46b932cd845904332e0bff6e28d69f3e
- SHA1 75ebdb05a5d001ab52fd65b4d8b4cf56cd924dcf
- SHA512 b1b0c1be02d8f50cbcfc68670b1739c6c69bb576e5480ddda77dcb946c65f381924174f5c4c7cc92305aca220ede25db7fcf44149d75bba2103ba627ddcd31f9
- SSDEEP 98304:9k5p96948zvEdHr8RGxBv9OW/sBtq8QkpouHg/tphqq19nOac3CzPoZ3Nr7:9kb96e8oZ8yvsWCqZkpVHg1vVCyzPYN
- TLSH T1164633D021DF18B9D018C2706BC7A5ACF56D72EB8EF85D286B28530AFD6DC468CE3645
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger