General
- Target DeltaExecutor.zip
- Size 459KB
- Sample260722-vwkncszekc
- SHA256 c818050c8b1381d1fe577c53e781004c6570ac32628a64e586764629c2c36e5b
- MD5 acd0513db93ccbe22db126578e9cb0b0
- SHA1 c56c2c5d019cce2563ffa6c03af7c18608ff3ad7
- SHA512 fbcd3d27190f9f3b18c60727f127c1fa82955997c6e85c477167ac8e8737572c3d8eb1d15beb692b8d7864379f4fe7f25e45a7883f1aa8280879a953d5d5e512
- SSDEEP 12288:KKEgBxsLlEtLcMgKiL9yAnZCkALO4hD8SxiklpaJjgvSA:KgBfnpAZCkALl8VkjogKA
- TLSH T187A423960D57336ADDD911B29D77F7C900BACFAD35DFC9B887681892811992ECB0F00A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ARMClient.Authentication.dll
Resource
win11-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
ARMClient.Library.dll
Resource
win11-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Autofac.dll
Resource
win11-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
DeltaExecutor.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral5
Sample
Newtonsoft.Json.dll
Resource
win11-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
System.IO.Abstractions.dll
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target ARMClient.Authentication.dll
- Size 66KB
- SHA256 9931b5d62e7fb38eeb8f86f6204b6055f7eeca08cba780698167c8846ca90647
- MD5 bc1b4885c1bcc757113a7e2c000f4821
- SHA1 e1153f6423567ca4a2b7d4947cbdb1aed5ca11d8
- SHA512 5fcdc9d31956437a4bdf459e337b76f93070bbf430121a651e52517e833d79f38ce3c3c124d099bda5e039252ccb32f40f64ae3517250a47f73134402e0433c8
- SSDEEP 1536:M9vycbM2Ur9ozNPl9kIzGcGJVOvALlqwhuPDmLNzR4INnS:Pcj7kIzGcO0DSRLNnS
- TLSH T196636C85A7FCCA23E6DF5ABCD1A4D1471B72E7966810F78E1C8CF4EA244338046416AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target ARMClient.Library.dll
- Size 32KB
- SHA256 90d4ca5ab2baf128d46a3f5d5a71bea524c413f40bdbc4a03668436bcfcce5f3
- MD5 d6bb28c67f08bead73403ae90787b64d
- SHA1 449086e0b990918fc4f15c8ef9e8d48a6486b7d1
- SHA512 6b29dec43b7ccdea3c74afe7a40d6391e26702238f4a9ecfd0fb223d279021ebbe0801723006beadf340bcd50ea8752adb696622dad83e0b32a5e75c6663fb1b
- SSDEEP 768:OZmbSucRuI3sUeaHj2eQLUrDj08BkaXQyu6ewxaaicmhH9AIIKqU:vbj3yeaHjTQwHPkGQLNaa2IdkU
- TLSH T1FCE27CC48B6C9523C98B5EB896A8C1436E35D3DA5D21E65E08DCF8EA1CD33C9970473E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Autofac.dll
- Size 203KB
- SHA256 5ff4fee94c0da8cd0fc92db8eb9809eea9f410e7820d427fea9f42f36aecea9a
- MD5 e9b1b1b9ad333024340ad235a8774ca9
- SHA1 3c0182e69afa02c90ce080dd72fdc6dcc6cf7930
- SHA512 e8dfc18d080ce2432c6ad2e1a701c44cc8b47203ca7b1344cc0590f0fa9c0aa929016e6407cd2dc29c3e7f32f456b39d6b429e9fa92029a14401ab21823ff23b
- SSDEEP 3072:e0bjUiR6wH2/HuLULOpPWHQ17n56Wwmz9lWbW7q9DahV/:llCnSZv17n56WwmzyC7q9DahV
- TLSH T12814394563FC1737D1FF4B7EA47450018BBAF917E845E64E4F9410FA06A2F05AEA0AA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target DeltaExecutor.exe
- Size 305KB
- SHA256 576b74eb4ab1287fc39e4f1dbecc478deb8b0bd14f7104ae1c6446946ffd4a28
- MD5 6d9dcaa75e1846e79d6f0eeef87aae10
- SHA1 0d6231f8ed4445e7b1e716bb34b55e5e362a825d
- SHA512 eb8edd40ff7881b15c809febdcab209ebaed7a6ea1098425f035d2b0cdac3f4e0ce832ef35b5e3802e7cbb4c7df661c38f471145c584ec3ff167654ca6c4f88e
- SSDEEP 6144:jIQ4WYGDlFUBnNgVUq19v5pwOMw1cilZg:0Q4AFUBNgVr7FMQPlZg
- TLSH T14C644B86636CC7A1E16F1F76B86282EA8733F9069CA5D7DD194CE7EC18637818C10727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target Newtonsoft.Json.dll
- Size 531KB
- SHA256 7b1bbdd36dfccf96d8b941782bc79a43072130989331242548c3553d5c8578ea
- MD5 859adf11b4d2a656a8ee2d070b726743
- SHA1 d53682045cf3b3d674b0c957643bc2abc7fa42c4
- SHA512 6540acb9f3e8884af60394aad8e17964d4cf1469d7f0df589dee86a672f711588b70d3fd4033ecef5d954ef4cd7ba8581c2855d6311921da68a6a9b7c20e0eba
- SSDEEP 6144:YeC37wbJmJ5bd4m15M+S50cK7q2UGu7WEYEaWdDBLH5WHxJ16Wi/h4aBTBFFu4J+:s37Ogr2VAHx7JijBZdPfPi
- TLSH T19AC43A502BF89726E6FE2771F438061557F9F45AE67EEB4F5A4095AA1C837808C00BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target System.IO.Abstractions.dll
- Size 53KB
- SHA256 7da16ef846948a94f665b694b9b65e6882496dbb27ba57a17abfbb51f7cf07be
- MD5 f239405f612d8f172eaa8291be224ff1
- SHA1 3328282fd11c277af4e55747dcfda358243d9942
- SHA512 038d20ea3aa0419032b34c7dea4e4b613fe4f7bc75256820c94cbaf7bb8a5dc5f6bbcc08d21f3a6129cb5fb9773100d11bf7561dc11844a04dcaf3d6bb6ef0b4
- SSDEEP 768:Dui8/DurjNnJRqqjqqBqqjqq5c55c3dxgYk9A9yu6eTLSnEKmh0QSnE5:Dui8/DurFc55CjgrA9LNHCIHh
- TLSH T19B33F75C2FF4E157DC2E05B479A0C22A6B38D682C803E31A2BB5BDF56C733A5C61245E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10