7dec2e410d518dc0695582380a364dfea5124dacdb490306ba5ac8f6a8e1cbad

General

Target
lltweaks macro(2).rar
Size 44.5MB
Sample260729-3ftv4avcnc
SHA256 7dec2e410d518dc0695582380a364dfea5124dacdb490306ba5ac8f6a8e1cbad
MD5 876a19dea88eaf929507316593b26a7c
SHA1 86b3b0739065fd5d21445411e85493c3f0f0c3a6
SHA512 7566d506df9deaea290bcbce5c69aafb0605862455ba9e8d966f386e696f0a2fac64f2d93fbb81c6dce5d8a0ff3dcff148a13e1f12a4976ae0f2573f7867e3f4
SSDEEP 786432:GGXCWGYnJ3jsk/pIjxO/CFKZ4YNMALmbkwJ20xzwnazLrloPVl2DT6v7XqI:JbnVppI38ZrrmIwJ20FMKDmz6I
TLSH
T1ABA733782045BEB9D3AF00336FCC5BC02B2CFB76717BB8B70FA422A4179A646551069D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  lltweaks macro-20260609T151358Z-3-001/lltweaks macro/lltweaks macro/Copy of LLTweaks Macro.exe
- Size 1.5MB
- SHA256 2adb86c6ce84689cb71e62bf4dda4a77106ee3fbddee605435a9bf54785c928a
- MD5 10ab4807a7a40b1977081bb6f855417d
- SHA1 9cbb3b89cd82d31d044a0d2b248ea1a826fd96c4
- SHA512 a2dbf0e579e1df628bdffa920c1c3780bb1e71712359038b4837e7ad7a776c23f8fcac6a2906fe9d8637adaf4ce29aac65439d257a8494e58f4de038601a3a6f
- SSDEEP 49152:h1FYwNeesf/OnCQiOhZM45hN9xyDWcLunMGdp:GwMyiOhZM45hN9xyDbbA
- TLSH
  T1D075AF57F3A501FED0AB913C91079207E67134192320DBDB27D98A692F53BE1AE7EB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  lltweaks macro-20260609T151358Z-3-001/lltweaks macro/lltweaks macro/SDL3.dll
- Size 2.7MB
- SHA256 2632e21625861a0dc106f2b1abb649e610d8be88534ba74c76a763abe5aefaa3
- MD5 4491a55769e5327006c073ab2d121673
- SHA1 a119f81f752261252c92dd5cc52ab01b7372712f
- SHA512 a854639fb3596f90c6f78d14305b43e87ceae8ece459ebc493d577ce0208090bd49a2e26e9c1f564659060364be11659d6d4d1f6a56ab690f33c06cd11781200
- SSDEEP 49152:EAq05dC3CX9y47Jv9O+D0jXc9hBxA8U/GTmF2xKhUH2RUlrny6E8:Z5gMZQDo1
- TLSH
  T199D59E8DE3AA0199C9778079C65BA607E2B2781417D19BDF47A547A93F33BE0223F710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  lltweaks macro-20260609T151358Z-3-001/lltweaks macro/lltweaks macro/ViGEmClient.dll
- Size 309KB
- SHA256 c88abc4e99eff36a241c0f54f209a5f9060f2b4bf6f31235cf6bc7930b98ee87
- MD5 55f03f97501782d4851b45ea9873c929
- SHA1 84fb348f95b1956c65fe401c3e4f93af30d1af33
- SHA512 3fcad6cf5c301b7a552068a9bebf8f637458d333faa918ae0e0f6930e6db03ae29bc44f1ba41acc2ce926603583c699d457b570af8df0136fd89a9fd2bfa6568
- SSDEEP 6144:LDOyHrMsGxg+RqoLIEeJ61hVweb8fK6Uhj8M8HctjQM1zv:mhDLHecVHwAgvwz
- TLSH
  T195647C5AB3A448B5E963913DC9438A4AE7F378055B72D74F13A0439E3F233A1692E731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  lltweaks macro-20260609T151358Z-3-001/lltweaks macro/lltweaks macro/ViGEmClient.dmp
- Size 260.0MB
- SHA256 d3f775d0dde7c4be60ffea7391995e06d21d3fbbc728aa319ada33e85f0dccef
- MD5 33b555ed4f4265254417a3eab6c587b5
- SHA1 09b99bf04d4d67b3acd8209f27de1adf4bcd667b
- SHA512 a083298a1b0ba078c3b029fffb3c893118eb1310220fbcab32836ef992ae75f8bba4cd25f3dd5aff3ff77cefddd12399559d9a2f13856ca0f6b233ba0077368e
- SSDEEP 1572864:Xo54O6NfYTWiPGPbnQVQDJG21ieTQ3MFn:45MNfYLryzg8Q3MFn
- TLSH
  T155D86A06A3A6D568D1BAC234C4A257F1ABB17CD6C72187CF01507D397EB36D02A3BB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  lltweaks macro-20260609T151358Z-3-001/lltweaks macro/lltweaks macro/cfg.ll
- Size 195B
- SHA256 3f159d0d4aa37be865da81ae72a9c1645ce86b57c4a30135241303c7abb56287
- MD5 1afbfaa06a112bc5d07acc76d549f96f
- SHA1 e9c9ef2848ef36efd75f47bde725e8f739a3c224
- SHA512 3ca6315cc7704786092e38a23ee0adfdb281ca430fd01130c6ae179bb17aea72c8f7043539a46112b2b659a1057d089387376e96d3567e4b433e1844575a265e
- TLSH
  T14CD0027149D671DD678FD1454F021674035ED5B9303179AD2E9E5AB0C907910C9F7D01
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5
- Target
  lltweaks macro-20260609T151358Z-3-001/lltweaks macro/lltweaks macro/interception.dll
- Size 11KB
- SHA256 ab88164c11b1b48488772d4c3bfaa4509d5b0ae9dbc5a691dc4f96f0260443c8
- MD5 fe8b2a022297aa36a3546391221f635a
- SHA1 346e04907eb628372f459fbbf109b6cff57cac13
- SHA512 fa203db607cb1154f7ac84e64b236b19ff29abab1b443609648ee3fafa53581c22420edd1f5ed2c522ab7f3c2577c73822eafbf143a8c80914a3061193b10a1c
- SSDEEP 192:wBKz1mGyRWIddjlkuSCqPDKSyFVzhveZhAk3M+j4sreC:EKsGyRhdtlkuSCLS8VcZhP344
- TLSH
  T14F320856EBBD107DF497D1F89AE61606E9713A00076563CF01709AAC18A3BD6D73B312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

Windows Command Shell

1

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6