General
- Target cm1 scan.zip
- Size 56.1MB
- Sample260728-bsrsqaed46
- SHA256 a29bc3376a6c2b65db10da8af76698808af02909db61ae1e37303b36e478bb8f
- MD5 6000e5017e32eed405a9ec0266abf2df
- SHA1 b6ffb25877bf29bd11dd757d8803ea5462241974
- SHA512 0f8c262753ac98dcacac7d98b5ee6d7f056a9a4c9d9e9d7d5d86a0bd858b273152cead4df0be4c2ba3e7777aeca6aa4affd2b024a15e069dcf4ad197b1813e11
- SSDEEP 1572864:1wv1BNVDi17YYEKr5kKfNtINKEpquTDcfXA5TS9OtcDS6pth:6vnDDlYh5zfQNlqQcfQJHtcW6pth
- TLSH T1C9D733876CAE4D68A312C3B7CE6B9C09724AF6C9FB43D45785C0775A257060B4EEB630
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CM1_21.1 - Copy/CM1/cm1.exe
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
CM1_21.1 - Copy/CM1/onefile.vbs
Resource
win10ltsc2021-20260513-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target CM1_21.1 - Copy/CM1/cm1.exe
- Size 12.4MB
- SHA256 67df6e26f150556d4376817ab10a8b16f510c58e6261630494eddb260c77f9ca
- MD5 03074fa3151d849fb49294dd571d3faa
- SHA1 6529ea1cba8c9f43e87a3ffab4dd921f02d7a9fe
- SHA512 0152492b0b302b91fc065c01bd540b69966d4b47059950a627de9844c207f462582e074b7ee36c414d4c4d12601264ef8f8f34562a0c6fd2ea1a72ad24d14f0d
- SSDEEP 98304:gVkiT1f7pbySBJEY6mDo2+yFUsMPCCixVGaUvXKUSnxcUM2N4M4w5X:M1Dpm6PIyFVXrUyUSD
- TLSH T1CDD60843F7A1C0D9C126C53496AAB223FA307C8C85397627BF8C77242FB5B509E99B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target CM1_21.1 - Copy/CM1/onefile.F
- Size 9.2MB
- SHA256 33b1800c1c6c674f7f219d61908339bec690dd73398901b2461472783620b7ea
- MD5 cd41b5ef0238e408cf0fd6a42f64bbdb
- SHA1 99658223d2e8f12c0daece116d58bf396f406a4f
- SHA512 ec48bd5d76f07037528bd316ec72abe46191d618fa9d51a6c3c35d45fa43986bac2378d1c169cfca5a5ba330bc872c8bba328ef75bc3d8abe4fb9463c641c1a4
- SSDEEP 49152:WOOjMQOmGYmhDjjjlsQPTS0Tlc4cS3L2Eoi/KXfeNozR4lmkJ4yYgl24Wu5qrNXa:VjjjjlsQPFoWoN4wkJsmRzjjjlsty
- TLSH T109A6191E9D5519301BC3D27958AE09C6FA49842746B43C90344CE2A8BF8F674ABFC7ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.