General
- Target ebuddy-12-5-0.msi
- Size 4.7MB
- Sample260728-bwt29ahl8s
- SHA256 a11e006a7a94360f89cab11c3e31a898f04da0b9e337c08da57990f28a6e6444
- MD5 6db0c539832bee96f6cec22361dbfbb9
- SHA1 63119a0b338f403887f0fcd9fdea6bfc34080d18
- SHA512 449528dd231aa42cd54126fd2faa88dad11fd9d4c4bd3d8a6fd0cc68e57d50719add79ebe50ac94e7e2eca313385110b0501586d1192b6cb489eba9e5437ff93
- SSDEEP 49152:lLVFd8tc+5I5K+l4l//zYnKFG+ldZ+iKg1/6waeG4lSPL3rvupPgMFD:lL5oODlw//zzG+lKicslSPHvMR
- TLSH T15536E018905114A6F399243355D3F65C262EBD11BBD6CCA603DFF8A62E709F3ED2242B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ebuddy-12-5-0.msi
Resource
win11-20260513-en
18 signatures
300 seconds
Malware Config
Targets
-
- Target ebuddy-12-5-0.msi
- Size 4.7MB
- SHA256 a11e006a7a94360f89cab11c3e31a898f04da0b9e337c08da57990f28a6e6444
- MD5 6db0c539832bee96f6cec22361dbfbb9
- SHA1 63119a0b338f403887f0fcd9fdea6bfc34080d18
- SHA512 449528dd231aa42cd54126fd2faa88dad11fd9d4c4bd3d8a6fd0cc68e57d50719add79ebe50ac94e7e2eca313385110b0501586d1192b6cb489eba9e5437ff93
- SSDEEP 49152:lLVFd8tc+5I5K+l4l//zYnKFG+ldZ+iKg1/6waeG4lSPL3rvupPgMFD:lL5oODlw//zzG+lKicslSPHvMR
- TLSH T15536E018905114A6F399243355D3F65C262EBD11BBD6CCA603DFF8A62E709F3ED2242B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.