General
- Target Loader_v3.5.zip
- Size 131.7MB
- Sample260724-vcb7wathqf
- SHA256 a03e5673dc6ddc4b2185ddd00f52b483ebb1a4b7159f0067461eb84d0e7871ca
- MD5 0b2d63bc91ac07e02abd2baed7cbcbd3
- SHA1 f1d44116b75af13e945f0f37d1fee4a1c45c6ed6
- SHA512 309b618a379bfaa9f2185f756744424f66735b33d5e59a686acdecedf66da82e339f82010d743d5209da0221b2a1fa5f520b6cf46030184ab7c3bc46447dafcb
- SSDEEP 3145728:n0UIjXe+1OgIxqUtssI02NIcLKdKh4fdG:n0UKu+cgIxqDZzNPLKdu4Q
- TLSH T11068339CE7F05F1C432F993AC5E176873F2FC837FA0C97B05A16452706615AB60A8B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Loader_v3.5/Loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Loader_v3.5/Loader.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Loader_v3.5/helper.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Loader_v3.5/helper.dll
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target Loader_v3.5/Loader.exe
- Size 93.3MB
- SHA256 38fd0c466038531f0920a5ac8ce7e6b8e0a219056deab5ca6891e7af1e8a1271
- MD5 4a2c61d06394584e0aec1965c115ea42
- SHA1 cd522203256f66055654087c85007eb0cad0d063
- SHA512 942257a0f3b89097e65f6e700e694e2b1cb46262d55de25164189d29a9e921cb5ae209f3545938c520802208c37c7a3775427e2d68ff7a71d63a4aace65d4976
- SSDEEP 1572864:cZa7hmguP2nG0/Vyv7UhgxIabc/x7Awby:cZa7hmguP2nUOnAwby
- TLSH T143286C43A2E751D8F0BBD17497E65323E932BC490B3469EF12944B312F72AE0A779B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
- Target Loader_v3.5/helper.dll
- Size 978KB
- SHA256 3c1df4abe037e905125e18b277e4b6d8b5857466b4f6cd50db77437ca5f8137e
- MD5 8d456d1930bd46be40551002de6cb3bf
- SHA1 0d522e8e50e1b7aa28cff1ff525293d0ccf2363d
- SHA512 f0b6789692ce680bf39a059cc5e63ec4b8a27f164030e2b111f7d5b6f5b66730d33064ea58c95a8d8154ab127f05eb0a9ad19209188f145ba98b1b9209e2c5c1
- SSDEEP 12288:G5HFuE8dHq+vM77ofcjWusWSsWncoDcD6G+/PWD1XAM5yXIm78OYX4E1njkmQ3wm:Xd7UImWywpUhRNWboO4SwhqoUu/9C
- TLSH T18C25337F0B39A8A9C659949E00F474977D0864FC2BD9C36B65F23A3F6B6F701A031924
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10