General
- Target reaper_7.78.zip
- Size 34.2MB
- Sample260724-ev749sgj61
- SHA256 99bb93663691a883a504382d55c9250d969124e7093e624bfade86cdfc10ddb2
- MD5 9c8614b6226b96bb0ceaf7beeec8ebe2
- SHA1 d56b550adc8167fc2098afc88635bfa116324f38
- SHA512 bb91d04fcdaa0aeb60f468f34a279c959943c08452dcadb43312ffd97e2219ddb2200aedc1b969be7174c1eabe67ba0d50727da61485cd24c2a164ee879880d5
- SSDEEP 393216:E8k9rvvNXjP4dHys0bx3rohoDSIHTvKkornLk+8U8NB7sb7CecETwNjiWczIf13+:Edr276ulIf+nLkrAbribcfTrj9yAz
- TLSH T15A7733E1C03EBC9C97DC685126578248E5FE954BD6683CC32DD301F2EAB0A9B5EAF441
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Reaper 7.78.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Reaper 7.78.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
_Silent Install.cmd
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral4
Sample
_Silent Install.cmd
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Behavioral task
behavioral5
Sample
_Unpack Portable.cmd
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Reaper 7.78.exe
- Size 34.2MB
- SHA256 fabeddc91fe0b9b41e8860eadc5d82ca72fea122a6c6a4a505d95e90b634c182
- MD5 8ded971944b03dfaf04d2b0b5184b502
- SHA1 d5aa10a3670c35e4eec5ecfd6f1fe01e379a6bcd
- SHA512 c177d05043fa9729faf3374e2a64def105b273273c4bbc99f829fdf9470abc808743c0cf090e864a3164ce2ca624624b5f4c52cb636fb1abf3ef242d4bd838c5
- SSDEEP 393216:XIBx9fHLbh2XpeMGR93vUTStkO9ThIqCLdTMokcsVFXWbrSwuAls9ZiamliHNdaP:WxsFeMjOtIdTMvGb/Ilmjzt4Z+KM
- TLSH T1DE7733F1C13AB8ECD79818712A579248D9BF654ADA383C832DD701F1DBB065B1DEE481
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
- Target _Silent Install.cmd
- Size 1KB
- SHA256 b9b2bc8c4d342555f072ded13d4b7f42e30068f3a4a643eb1662b707c3540240
- MD5 368946951663e83deb86dd8638363aa0
- SHA1 00e2055daa945c9a6836f65210d4cfef522f04cd
- SHA512 d1b3c764ccb5f598b18108ddc241f5b171ddc078dd685317e8fe6228fdd5f7902e4e3bfe4e5ff3c61d6c7eb8a66ec8c66a752815df99d8c2f3691c7e1cf95a6f
- TLSH T19C115A373670E54C93B00F842D748526742122DB2DB20D54B47F403B83E06C8386CF5B
- MD5 SHA1 SHA512 TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target _Unpack Portable.cmd
- Size 1KB
- SHA256 0b75111b1fd081c356b39aca32c8339ce329aef94efab7464d2411b797568b04
- MD5 71a29c08534d43c244e079fd8a19421a
- SHA1 ed840a47b751d116f8f3a8bbe41047048cb44fd3
- SHA512 fdf0d0171b2c151c59491ed0c99022d700168cd44741b03b3e5089692eea8fc23f56ec0b760d91783157cce879e1e3663e8f14395effd4868b379710637ccc54
- TLSH T1EA115A2B3670E54C93B00F842C748526B47122DB2CB20D10B07F403B83A16C8386CF5F
- MD5 SHA1 SHA512 TLSH
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Tasks
static1
installer
Score
3/10
behavioral1
discoveryinstaller
Score
7/10
behavioral2
discoveryinstaller
Score
7/10
behavioral3
discoveryexecutioninstaller
Score
7/10
behavioral4
discoveryexecutioninstaller
Score
7/10
behavioral5
discoveryexecutioninstaller
Score
7/10
behavioral6
discoveryexecutioninstaller
Score
7/10