General
- Target XnView.2.x-XnViewMP.0.x.KeygenS.7z
- Size 970KB
- Sample260722-kq9eessarg
- SHA256 0a0ce8ec8de043ffaf174b768c660491eee4fe6e2ac7f11b72c6f5be2914ab7d
- MD5 ad20171f46847a5d3a835a98a804010b
- SHA1 f1b66f74881f06676924ffeda85b108eac6a5b65
- SHA512 16d948e7e373e38bb77785ac502124b46a0c904366949d1e27523e338e6704a0b606338beb7e2f53f246cd3b3a2a91dcb138b68136334171d1ce896bbb1b2c90
- SSDEEP 24576:PQvHdxm2om2JZBK2zhTnSysHcriQiGVJHGvRrZImnXfTcZ:PQ1xmRtZBHL1iN0sZImoZ
- TLSH T158253362D4A73B90E77AC2FE2976A206F9F4C7BC51B63DD2E3394714E00468504E89B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
XnView.2.x-XnViewMP.0.x.KeygenS/XnView_MP_Keygen_v1.0_By_DFoX_URET/URET NFO v2.2.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
XnView.2.x-XnViewMP.0.x.KeygenS/XnView_MP_Keygen_v1.0_By_DFoX_URET/XnView_MP_Keygen_v1.0_By_DFoX_URET.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target XnView.2.x-XnViewMP.0.x.KeygenS/XnView_MP_Keygen_v1.0_By_DFoX_URET/URET NFO v2.2.exe
- Size 338KB
- SHA256 f67131c08430a915e3a307758fdadb72672ba60c93f12f03ded0c43cecd6fee0
- MD5 fc26edaa044131899060c8cb716496d9
- SHA1 a6c484efa534298903217c66464d61dd63e57f49
- SHA512 1018a8962b9323708f04fb7fc2f30f6539562d86d3e0da8091f1d2f64dd05f91ffd07830fef83fe330f39b6750207490674ee6036ee9f8ae372848254bbb10f6
- SSDEEP 6144:OF9IDTtnhpoS2/FhZfLdhmaioJMFFk1pKEkpnJwOVy31Lre8KT:AITthpoSqFhZfLdhmaioJMFFk1pKEkpo
- TLSH T18974E42123A6D21AED59F5B986B0D8FF57F06E0F7D8136849EE4F326157AD22D870083
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target XnView.2.x-XnViewMP.0.x.KeygenS/XnView_MP_Keygen_v1.0_By_DFoX_URET/XnView_MP_Keygen_v1.0_By_DFoX_URET.exe
- Size 588KB
- SHA256 6d67a669e245a4581b3a606b9a0ee062a00d7a438d226c7f3484687d51907aef
- MD5 b63a2361dc89b5fe559b36b97776095e
- SHA1 20132a8da8adac2352bd9edb3f75bac4c3466cbf
- SHA512 95c6dee2f4844661bb8b0c1eb520c5e3928312064ce50ac717f44824177bc0f2a9d54e2c9e8ebe5055a13446104f0bff1198d0cb32bae87d13433f523b159c57
- SSDEEP 12288:AZXdO03vjum54diVxydHpxGvSr1VdPyIP5BwxyL0xoqiTc:qVidiGdJxGvSrAIXn2iTc
- TLSH T170D402D07F804F52C23A033A85F7EF1032308EA897A64F4B5778AE573D57295261FA99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger