General
- Target 0d34a1a72abef76e8de6631d2b6cbbeed615922b35ad6cb7afdfce92170c3a72
- Size 6.9MB
- Sample260729-vthe8a1shw
- SHA256 0d34a1a72abef76e8de6631d2b6cbbeed615922b35ad6cb7afdfce92170c3a72
- MD5 43f418f53552d8f1cf9a0fb501200311
- SHA1 bc6f9e48bd7703031b4de1341726fb29824bb160
- SHA512 436ff08e510a77be8bac7a6b668df136c66faec7d110aec08a812b511a65cbca2cb2eba3145142a6529321fde1a992f6b67cf9351a41fe475b1130d23f1e3220
- SSDEEP 196608:iGyXFGusRMyHTVAVFZ2pa2AOLlKnrvHstg:GXjsKyzivMdI/
- TLSH T15A76339B5698BFF04276AB09F5AC8ECC34B0F0A652BDE0CD1462C255ECEDC88D17D619
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Bandizip_7.45_X64.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Bandizip_7.45_X64.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
www.mefcl.com.url
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral4
Sample
www.mefcl.com.url
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Bandizip_7.45_X64.exe
- Size 7.3MB
- SHA256 962feec7fc758391ebee2836f56f240b633ef5ac4708a66b003d37cf6c5f712c
- MD5 2630185b918869a902085442f4c5ba1c
- SHA1 1f1a9a48df43ec65788b58972c4bef6a09ceed24
- SHA512 4db9246731c58433a22e8532524b66e0b71c0db6c836812f1064795ea5be9a600d174b0e7d82a0ae138c1e4fc34f19dbca0f68eda07b061216592d475557a993
- SSDEEP 196608:dXHqhAWyH92YQnOI1/PqRHFyPswAYHDkRPPVYXi2:d/HPQOINitcvCO
- TLSH T1117623237EE0F471C17266B076AB83BCA5F2F8620435954B23E18A1D6E78990D73D772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
- Target www.mefcl.com.url
- Size 110B
- SHA256 383be82810ce9832b5798f473c14d1499df27abf76228d7183c8be1c8a6affee
- MD5 52737e73d1cb6851d8fc20490f85cfaa
- SHA1 50071a0da241a05f4206b675a43a359bdd41d9f5
- SHA512 91447bb2740813424ef32a056070f6db3611cddafaad905544a0806a072ce1f091a79f581110b4cf100383e3fbdfec6e26d9cdac74ff736e168d849b9966d3e4
- TLSH T1E9B0129C4004C19DD581CC0B70F4F944980EB5E048C2D4CCE5C0DECB0D040C2C545B27
- MD5 SHA1 SHA512 TLSH
Score4/10
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1