General
- Target RunTimeBroker.exe
- Size 426KB
- Sample260724-pj95lagb25
- SHA256 551c8108e3691d035b2417c4f1ec3083c5213514c1c65348c5934dfcad53225b
- MD5 230aa6979b84ef379373d3638c485fca
- SHA1 608ed0cadd68a22468248632b771c73a845fc812
- SHA512 1aab3a13a677cdd094ea504b34159b698e64da537cb47a3afc45b9aa16722ad52105a7dc869c5f79ac9823597a0d0a4650eaa7dbf57da92b121c182e04b0ee34
- SSDEEP 1536:P4qY52zW8F3g4U4HuRu2Y69b8ya9y70WCI9wYhUxFJVg47fGLtmJ1MXFtdpg+7Bx:PUwtk
- TLSH T19994DF9813B51FE4DEC5C2EE570285A4709B40AB9963DAD4CFDFAAB4BC05C48FE30652
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RunTimeBroker.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
RunTimeBroker.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target RunTimeBroker.exe
- Size 426KB
- SHA256 551c8108e3691d035b2417c4f1ec3083c5213514c1c65348c5934dfcad53225b
- MD5 230aa6979b84ef379373d3638c485fca
- SHA1 608ed0cadd68a22468248632b771c73a845fc812
- SHA512 1aab3a13a677cdd094ea504b34159b698e64da537cb47a3afc45b9aa16722ad52105a7dc869c5f79ac9823597a0d0a4650eaa7dbf57da92b121c182e04b0ee34
- SSDEEP 1536:P4qY52zW8F3g4U4HuRu2Y69b8ya9y70WCI9wYhUxFJVg47fGLtmJ1MXFtdpg+7Bx:PUwtk
- TLSH T19994DF9813B51FE4DEC5C2EE570285A4709B40AB9963DAD4CFDFAAB4BC05C48FE30652
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Tries to connect to .bazar domain
Attempts to lookup or connect to a .bazar domain, used by BazarBackdoor, Trickbot, and potentially others.