General
- Target UNIxLoader.NoEditor-9.7.1.exe
- Size 12.4MB
- Sample260728-apk1bsea96
- SHA256 eec1cee137dc5bf0da3f0d778e091e88587304b52a2cf78644334e7e72c88819
- MD5 bb909ddecd012627a38ce25e2ceb6ac3
- SHA1 53056884197591f53dad69fef54c91a8ef87a64b
- SHA512 b8e076fdf61e9e2703750acb8457061aae45cd1443010d1548eb85634a74e48472f85fe0b22e9cb9c901bb0fadafe4052d9139edf7367b2927d2feeafcad6a6c
- SSDEEP 196608:QPgFa8mBK1YhmuX1YC06qZhXEaL5Bv9e7k:IsmBAYhmuX16ZhUArFeA
- TLSH T1EFD6ADA2B6A800E5D83F8178C78A6317E732B46517F057DF26945AB51F63BE02E7B700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UNIxLoader.NoEditor-9.7.1.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
UNIxLoader.NoEditor-9.7.1.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target UNIxLoader.NoEditor-9.7.1.exe
- Size 12.4MB
- SHA256 eec1cee137dc5bf0da3f0d778e091e88587304b52a2cf78644334e7e72c88819
- MD5 bb909ddecd012627a38ce25e2ceb6ac3
- SHA1 53056884197591f53dad69fef54c91a8ef87a64b
- SHA512 b8e076fdf61e9e2703750acb8457061aae45cd1443010d1548eb85634a74e48472f85fe0b22e9cb9c901bb0fadafe4052d9139edf7367b2927d2feeafcad6a6c
- SSDEEP 196608:QPgFa8mBK1YhmuX1YC06qZhXEaL5Bv9e7k:IsmBAYhmuX16ZhUArFeA
- TLSH T1EFD6ADA2B6A800E5D83F8178C78A6317E732B46517F057DF26945AB51F63BE02E7B700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of NtSetInformationThreadHideFromDebugger