General
- Target cabbar.rar
- Size 18.7MB
- Sample260727-ae5a8aeq9v
- SHA256 86d5e4f54434a6c25deb3b2b8f2ac9d7ac7b9812c59ebe89f88a8823f4f10478
- MD5 c95e9b167010a4e94733397090eda864
- SHA1 0186329b08765d9ac7a1e289f2e21b72ee196103
- SHA512 964ae89cbad74189ee6bf3d5a539ada1b58a843ac8b7854c3f38b65abbc9fe2c7f5648fc9e133b937224f37759ee6f8e2bb6dcbc6b19fa460591a694581e11a4
- SSDEEP 393216:njwiMj6uoAoxKGRDsQyZ90lJXa/FT3Geqw/biqgAMg/wzHeeSiI9i7XmveP:nj0jR9oBBsQyIZa/FTawVi7I9WUeP
- TLSH T1B117335E61F79B448B6FE81D8C0C6E29660A16A7FBE6050700837EDE7735C46C11AEF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cabbar.rar
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
cabbar.rar
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
cabbar.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral4
Sample
cabbar.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target cabbar.rar
- Size 18.7MB
- SHA256 86d5e4f54434a6c25deb3b2b8f2ac9d7ac7b9812c59ebe89f88a8823f4f10478
- MD5 c95e9b167010a4e94733397090eda864
- SHA1 0186329b08765d9ac7a1e289f2e21b72ee196103
- SHA512 964ae89cbad74189ee6bf3d5a539ada1b58a843ac8b7854c3f38b65abbc9fe2c7f5648fc9e133b937224f37759ee6f8e2bb6dcbc6b19fa460591a694581e11a4
- SSDEEP 393216:njwiMj6uoAoxKGRDsQyZ90lJXa/FT3Geqw/biqgAMg/wzHeeSiI9i7XmveP:nj0jR9oBBsQyIZa/FTawVi7I9WUeP
- TLSH T1B117335E61F79B448B6FE81D8C0C6E29660A16A7FBE6050700837EDE7735C46C11AEF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target cabbar.exe
- Size 20.7MB
- SHA256 727613afc14f2d5d9079f9d59648874e1920dc7bc6958d76b1cb5f531e8db7ee
- MD5 520af8ac3118c4fea46f65c9c09e81de
- SHA1 58e7e72a282b19a8ce4ec76e796502da0b8b7311
- SHA512 3cb77fdfe551f46826474472755500cebfce52a0c0d38a750191fa302370cbd6504367cd4575b38d9ccd45ce1a414589e9831ce6f299249fe33d17da6fdd4090
- SSDEEP 393216:604/s3wl30x1iTMWsk3aP5WotuF3Y5t091MrVm+3yqHbphJC8KS:jwOwJ0G4WsHst5nW0+3y2nJ
- TLSH T1812723E5C6D05BF8C7828648915F03CEF6C1664BD3EB5E1936C79C0227A0C97164BEBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger