General
- Target SWIFT07282026.exe
- Size 575KB
- Sample260729-s7x2qaar3s
- SHA256 f68b0ab0aa45a9119c1a097c4d64dd3250733f771b34cec0699e3f9a7c88d79e
- MD5 f7fb31cc8b2a0be022168204bcfd91a7
- SHA1 bbe3b65bfddcacf116b310acd312395ef2d6b54e
- SHA512 27e7a715c078fb15618b4712d74b88865497e41b768d3af6d942532823a08a16dd7a8be405765027d0b2e99d52a693fdb28c4e6da6aa3dc5adb2c4b5243115f8
- SSDEEP 12288:AfYPo/gfgMUCPvcU8bLqd3sqItJSfgpf6DtdzfW9+:AfYPo/cgIH/8/qdGTpat9L
- TLSH T128C42312EBE0D8AAD4590973CD3263F7CAAEAD61D3284A8B47457D487D71383DA1F381
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
SWIFT07282026.exe
Resource
win10v2004-20260513-en
8 signatures
40 seconds
Behavioral task
behavioral2
Sample
SWIFT07282026.exe
Resource
win11ltsc2024-20260709-en
8 signatures
40 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
3 signatures
40 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
3 signatures
40 seconds
Malware Config
Targets
-
- Target SWIFT07282026.exe
- Size 575KB
- SHA256 f68b0ab0aa45a9119c1a097c4d64dd3250733f771b34cec0699e3f9a7c88d79e
- MD5 f7fb31cc8b2a0be022168204bcfd91a7
- SHA1 bbe3b65bfddcacf116b310acd312395ef2d6b54e
- SHA512 27e7a715c078fb15618b4712d74b88865497e41b768d3af6d942532823a08a16dd7a8be405765027d0b2e99d52a693fdb28c4e6da6aa3dc5adb2c4b5243115f8
- SSDEEP 12288:AfYPo/gfgMUCPvcU8bLqd3sqItJSfgpf6DtdzfW9+:AfYPo/cgIH/8/qdGTpat9L
- TLSH T128C42312EBE0D8AAD4590973CD3263F7CAAEAD61D3284A8B47457D487D71383DA1F381
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- TLSH T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10