General
- Target factura.exe
- Size 999KB
- Sample260722-m4y7qaea26
- SHA256 1d83f7830dfad00877f7582bf2505463ce5f035a70d837d997c4f26852912288
- MD5 2ef3065371366c7ef99577f4252b8c3c
- SHA1 1659d6a87f533bf3443f11a69c13d05f24ca28cc
- SHA512 0a2c2450cfbacc1d70a147c69d16a605dcca74aa07e6fa24c0b1bad8970b9b3fa1eb03fd01c541dc378296b5e4fd301f220faa79726248847b9235e4ebedbca6
- SSDEEP 24576:TToaVFPNn0bf9CwA6j6QaW5jcFJmOw1Hx9sN:TUcFhY9CwA6j6s59Ow1HL
- TLSH T17C2523901619C913D2D3A7FA09E1F77A62B82D8CE201D35789FEDEEBBC1AB061C145C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
factura.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target factura.exe
- Size 999KB
- SHA256 1d83f7830dfad00877f7582bf2505463ce5f035a70d837d997c4f26852912288
- MD5 2ef3065371366c7ef99577f4252b8c3c
- SHA1 1659d6a87f533bf3443f11a69c13d05f24ca28cc
- SHA512 0a2c2450cfbacc1d70a147c69d16a605dcca74aa07e6fa24c0b1bad8970b9b3fa1eb03fd01c541dc378296b5e4fd301f220faa79726248847b9235e4ebedbca6
- SSDEEP 24576:TToaVFPNn0bf9CwA6j6QaW5jcFJmOw1Hx9sN:TUcFhY9CwA6j6s59Ow1HL
- TLSH T17C2523901619C913D2D3A7FA09E1F77A62B82D8CE201D35789FEDEEBBC1AB061C145C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Formbook payload
SmartAssembly .NET packer
Detects SmartAssembly .NET packer.
Suspicious use of SetThreadContext