lethalcue-hdt-prototype-v0.2.21.zip
- SHA256 306f82d70457c44d61def4291145cb048978e5ad3cc3859a11d51d203b92376f
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LethalCue.Core.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
LethalCue.Core.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
LethalCue.HdtPlugin.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
LethalCue.HdtPlugin.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
collect-feedback-bundle.ps1
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
collect-feedback-bundle.ps1
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target lethalcue-hdt-prototype-v0.2.21.zip
- Size 31KB
- Sample260723-blcefsyeld
- SHA256 306f82d70457c44d61def4291145cb048978e5ad3cc3859a11d51d203b92376f
- MD5 bdf379a41b3e1ecb7bf684029395b85f
- SHA1 c464692d5b5aefaefb69559caa25545e600dcda0
- SHA512 5bdd1d420faaef778941be8f352b5cc556c6fba061e5c947e5052620d3a6ec637fb48ee96a9297b0f155490856b47a2e54a1b2fa52f63166a66bd989b0103d3f
- SSDEEP 768:ZMiDsqfaizKfMdS4zqUIcb3G0Y9ORVVLVCU:ZMiDseAMdSmIcbW05vJCU
- TLSH T194E2E1794B756EB7E04BFB32B429F4B3FB199539A6C48147297D68A0D4CBC0A5018193
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/LethalCue.Core.dll unpack001/LethalCue.HdtPlugin.dll
File Explorer
-
lethalcue-hdt-prototype-v0.2.21.zip.zip 31KB
-
LethalCue.Core.dll.dll 19KB
-
LethalCue.HdtPlugin.dll.dll 49KB
-
README.txt5KB
-
collect-feedback-bundle.ps1.ps1 1KB
LethalCue.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6981f333d50a44ab282e4d8fabb6949db7473837665b79e6a982bdbd05cde8e2
- MD5 98037f5323e0382c0b40af072267a614
- SHA1 41451273629f05f608d4f7620d67ad5e08f31e4a
- SHA512 311d63ae53289fee36b3a7f27a72c52d86d2e0a3bc6b9355e6875575199955c318632cac5770c7541d87ae276d1a0d4102689926ebe156302ebd0a78de2929ad
- SSDEEP 384:lfcalt3pE625uQOOOjAZUeXjkCXaV932/8oLeb4+9HqmAXMHLwY:l7tZE62c53gXjPXaV932/8oLeb4G0XWf
- TLSH T1D892F9192BFC89AEE17E9776E8F14A1513B9BD5C1963D36C4F88A4D82F73300D900AB5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
704B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
LethalCue.HdtPlugin.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 19187a6729480fb12f7578d223663eefcd73b11629caf500f75e201e4c81884e
- MD5 94799af8b03e5c9430374f18734509f5
- SHA1 266c2d19c3e599cb434092e48681ce12a1309af5
- SHA512 8cf3cd4109abbfdb528e5b8e264189b3b40d5896467f14289461bed153ad5835e7ed0c0622663352482ce8a94f9384663cb6c3443cf6e77a91bd728c6532b767
- SSDEEP 1536:9j7PiUZaDikfoZe9v3YYL+t/p2Dlw4e/ywVV+:9jM2Wv3Yq64e/fV+
- TLSH T1F9330848A7F88A09D9BF0B7998B44A244BF6E4476923FB594ED4E0DD0D3B740CD187A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
56126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
47KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
720B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
README.txt
- SHA256 9418df5326e8632163677e5798823c7f220c0743d8a1ee72d57063c5b0b85de5
- MD5 d2526b3174d3dd0e690b3e1c03b5bd82
- SHA1 cfa04e62b769aaf194a7e591958f4a99ca2e4736
- SHA512 3e37cded58c5f228d64e43570d812b50a3e976c73d921ea85671af3731f504b904dd486862b18f5fc23d88f9e25c4e3cb2ff594ab50f281bcf488c0c6ef56c1b
- SSDEEP 96:5yA+qF+zNqb1x1oYrKxZrFqQpTddYmr9GIPFVdfEa57UEKEd9on1NylIfjnubdz6:5J+qEzNqb1xyYmBB7r9rVR97sa9S/tx
- TLSH T1B8C1965B7315733AEA7500E1751446E2DF09F9BA5B2D17B060DE5288231E0BCD2AB3AB
- MD5 SHA1 SHA512 SSDEEP TLSH
collect-feedback-bundle.ps1
- SHA256 598f1d536484b165b5ebbdb26e0690076669f6365a11ee4d610f30211c23929a
- MD5 7b3714bcd0aeb9ac540760bf1f91e3e0
- SHA1 0f3cfe1897d9e9e03125d5110a025296b8aa2439
- SHA512 dfe83ec3e8f2a3032d1f104256893288bed12307d65de72416749e04eeac1730d67501866131155b457f36720939c2557c85a175f49e1616048893198ed43a16
- TLSH T1A7214439C9573D3B5BEE4340A08D51252A8E84DE8E0AEB17055F808DFAB1D3E0F141B4
- MD5 SHA1 SHA512 TLSH