General
- Target MultiBloxInstaller.exe
- Size 11.7MB
- Sample260724-ne7y1aydph
- SHA256 03132e7a41ea42f196ff806029d51e2894f9f3fec4334b82fca96aad47dcb7c0
- MD5 fd988dacb37ba7635864400f93edf436
- SHA1 fc6e401146ed37ac32ee39e378f28197abb55143
- SHA512 a3a9d1d1ea138bb4420288794a80eb81f3771ed5686f43c13581e85153ee0728825135033cf788a2c6e477518133d83b64351ec5c879409ca803f68be7e20e00
- SSDEEP 196608:dnm49UEoBA1HeT39IigQh1ncKOVVthIUo0W8/Lo79u5Y39SE37SdatQtNQDxMK0:hJwq1+TtIiLv0VNRW8E5u6EC6a6hK0
- TLSH T10CC6334D735388F8E55B8437D8A0CAB796A3BC498372D68F57943D833AD30908EB5762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
MultiBloxInstaller.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
MultiBloxInstaller.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
main.pyc
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
main.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target MultiBloxInstaller.exe
- Size 11.7MB
- SHA256 03132e7a41ea42f196ff806029d51e2894f9f3fec4334b82fca96aad47dcb7c0
- MD5 fd988dacb37ba7635864400f93edf436
- SHA1 fc6e401146ed37ac32ee39e378f28197abb55143
- SHA512 a3a9d1d1ea138bb4420288794a80eb81f3771ed5686f43c13581e85153ee0728825135033cf788a2c6e477518133d83b64351ec5c879409ca803f68be7e20e00
- SSDEEP 196608:dnm49UEoBA1HeT39IigQh1ncKOVVthIUo0W8/Lo79u5Y39SE37SdatQtNQDxMK0:hJwq1+TtIiLv0VNRW8E5u6EC6a6hK0
- TLSH T10CC6334D735388F8E55B8437D8A0CAB796A3BC498372D68F57943D833AD30908EB5762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target main.pyc
- Size 15KB
- SHA256 ef58d170fb1ef68fb50d2974d6632c0ba4d1e9d9703a940df186547eecb8131b
- MD5 c6855a32bb83422066cad6e7960e9729
- SHA1 5397fe2e9dd4f1245ce117a216d0aee42277c016
- SHA512 d3cd388a6e32e7c48bc5fc7f53950ffca73e40263101b9d257f89e1b5e2c670dd0d6b971f1950d8a9c91941814cc67dd78c57c01beb8da6a863682bd3b1b70d2
- SSDEEP 192:w/+BKWZekIJxGH28uwi4gHvxd3XByKQGTQVG0+X/zpjg2AhERDEat:w/+DeByH2T/XBQy04zppHSat
- TLSH T18162E9C557B2C232FED5F9BA181E379DF5A4A2D2B100930766F360A92F876901D530CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10