0f537608e39c3bc8aea6f297ef2fa56c0898bdc17f085dfd4e920dd32594e503

Sharing

Copy URL Twitter E-mail

General

Target
detonacion_v2_20260730_131823.zip
Size 30.6MB
Sample260730-nfct9awemc
SHA256 0f537608e39c3bc8aea6f297ef2fa56c0898bdc17f085dfd4e920dd32594e503
MD5 8eebefb2785cd0c0ff59cb0e54beea60
SHA1 c4ad50b061709c9af518696d169aa829b5f9d9b4
SHA512 5aea7ef4928f95f7790d86afaa321e8ff088eb5bfbcca388cdf37d7115d408f0970f4354ddc82ef95bb995c40590748077dded28ec1842bd922a0e3e8eae484d
SSDEEP 786432:WPXf5IUB2nWvtZl3yamDdmcF8lVxIbcuYau/XNYQZXrR4NAaQhsxm:WPXf5nUWvtipBEXkcuANYC4WhOm
TLSH
T14D673321DA817BFD18E6E0B7B7D8828831CE92E5F0F2ED4D769E92C210AD7454EC4761
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution

Malware Config

Targets

- Target
  obs-studio\bin\64bit\avcodec-61.dll
- Size 36.1MB
- SHA256 fa26d83d428e6d54b63063dd87457a6325999db0ec96c485893ed2e67ec9924f
- MD5 d0bfce79939636ed1aa4ef959f9bb3d0
- SHA1 10dcdb3dbdf6069bcc92e716081c00421f1da47b
- SHA512 242a720d8f6968dfcf222055b6cf978a83f969102ff6771513a348b09c4e081f80ea7999d1411663cff0cf0dfeaebf0333db2a83260c8ebb45172c444b6e6ac2
- SSDEEP 393216:/Kp4R+9DVdTlTO7xvi6JBdzKTbn9dEX28H1Ev:/oVd5TONvy794PM
- TLSH
  T16F87AE4AF2A311E4C76BC874827A9E13FE28346D43141AF766D959253B63BF05B3AF01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  obs-studio\bin\64bit\avdevice-61.dll
- Size 81KB
- SHA256 e2c2c8ba1ccefb2c049b87338743055a5a154dcfd73c663533c1fe9cd02696fb
- MD5 41a0e4402f15d4116785c88b8a2139a8
- SHA1 b2758fa111de18dd9a3e522cb310cd303310a92a
- SHA512 c512fb544354ff1ad83b392315be4406113f31e84cb7b4c0a758e3af039745f0ce09f74e696a08bf59e4625ac4291eab87770f0a3f5d26bab9caa0af338c5aa4
- SSDEEP 1536:/3UEeAj7BeWB3BMqhFP3kGCcqMhlAEOgZ3lA4efNHyKEDa7Om:MqhFPJ0EPw/fNzmm
- TLSH
  T122836B07F2F404CDE4668576EAA21907E7B1B01E2301A3DF2764C36E2F237D16E7A659
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  obs-studio\bin\64bit\avfilter-10.dll
- Size 18.8MB
- SHA256 2ca25c466f3bf45e52949f28e56c71a3b76d17fea86fd1504fdb5e10eab0771e
- MD5 662b83d8cf43097d738da1549de0beea
- SHA1 b14856d7901996e7aee2fad8d3fcd150a734b261
- SHA512 f18f2cf5ea86c151f1d3ce2f54e117076d4b23648dfd1e831dbe8463e2a47671236059d9bf5a715d07813b83ad33e74350c3e5ce402957174a932798df201cbf
- SSDEEP 196608:5PaLUY9hS7Mzxlx3dYCn5lfTsAMMQ0P0ePJOVhL89oXtt8/VdwvYaAbjL6:5PiUMxlxth5qAMMr8e6L8i8zeY1z
- TLSH
  T1261702C5F1D951FCC06B847060AB6387FBA1385803B89AD7BBD04A162F12BE8517F796
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  obs-studio\bin\64bit\avformat-61.dll
- Size 2.3MB
- SHA256 fbdb503ab5ec037d7df3418c8fad2c1cc6d1e60f4f25a8315a5b9b1870830aff
- MD5 d384f7088433f55ea6b82f4275074491
- SHA1 7fee719e1e6944081432b31513a5f551850e4c1c
- SHA512 d635daebb3e1fa043dbfe2949687b5c4250e1a158fa3a2867dfe330242475e4af5306fb91f4ac260578ab474bf5abcc20eeaadd547d62a4eb47170f4442d9397
- SSDEEP 49152:miHLL26ZB8Aakr3uO3px2/xTdL1Cxnxgf9Rh0J38wSmtp:/r/8AH3uOewxnxO36p
- TLSH
  T18EB58D57B3B411E8C6ABC1788247461BFBF1B45917209BFB16508B792F23BF6663A310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  obs-studio\bin\64bit\avutil-59.dll
- Size 889KB
- SHA256 42538af0207d32e105544751cf1145784ad540a871cc88c7dd2f31d2e850d322
- MD5 83ef41164fd199a421786ac6aa15be6f
- SHA1 010606239306b52df3eded4c5887bc08f094d50c
- SHA512 2448da958c703b6934016be3b6dbe856c0fe4b780f8a651832e1b48c2020c9b7a3d9432ab085b5af61a9f1b26ff2c428410d8e4c8b99d0c2339ee3382c54168d
- SSDEEP 12288:WM35hzJfbfa0BAF9zA8EYss311xg26JpiBp12eR:WM35hzCLA8EYss311xQiB9
- TLSH
  T197157D15DBE0046AC8664038D697590BF2723453D790B6EF26E24A543F23BD22D7FB3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  obs-studio\bin\64bit\libx264-164.dll
- Size 2.1MB
- SHA256 2f686b9665783c682e377abce820efc76080a224fe0c85761e7f2ac5a516431d
- MD5 929d7b1818b33fdfb597f06beea38382
- SHA1 db5dfd8e1fdf307ad0b28eed733b0bd21e4462aa
- SHA512 cedd8f82b9c1347b05d7a3216a623fcc2006712f44c530a7771f971494f08c45927314779379abbd20fade596addd304f893d3feeedf31cc80ddb43ee3a0dcf8
- SSDEEP 49152:Qp4WSEIPHValqnF02CSx6B7Wfi9i2l8bcK:OI7
- TLSH
  T1E1A59C5AEAB241F9C76B807CC56B9617E2B4342C03D06EF716C486646F23FD0763AB16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  obs-studio\bin\64bit\load.ps1
- Size 1KB
- SHA256 a3d5c72eeb814f49ee4252e5ddc16b440e5594e48b69b8f4164fe1f774e371f4
- MD5 f5f7d53b4b7673d077123ad110329be1
- SHA1 5871d70d7949a75168dbd3a36d7d7490dc5025a4
- SHA512 818788a46f62930950983bc46b9920aa3ca227c509d36c09eb4fbe0356165b0b4d74cb270e81bd94bd1c6c22bc6dbd81f68f424e48cce2a76bcbd3792d508e22
- TLSH
  T1B2317530C910FF77D7E341578584F514F4864177C0AD0C49EEA837507DDB558EA2A42B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7
- Target
  obs-studio\bin\64bit\msvcp140.dll
- Size 540KB
- SHA256 def46aa6a8f72f27bafac0c43334419486a4d1dcdb6c479a8ef7034b3e1fa4cb
- MD5 4e3fa9bd90ef020c14359639dc19312b
- SHA1 a51032ec39a292afda65b0e3053d4ff3e3241512
- SHA512 3e3c62fe860199953cc87e0516b77f6a039f2563cb6b5cc48edc51f243e5ea8fd9b2e3239a089966c403f17a8b3766090bc7b827399cceb00a37bac970855e15
- SSDEEP 12288:M0MrE03u1mHWV/I3z+bQEKZm+jWodEEV7X:M0p1F/IiQEKZm+jWodEENX
- TLSH
  T180C42A23F75906E0E195E3B8A1838702D7F17C5A8322E3C742EB955E2F577D0A63B690
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  obs-studio\bin\64bit\run.bat
- Size 918B
- SHA256 74d01d68ea0e628888ed57f5a0823a2679432b205ab3fe1a938006f620742e1b
- MD5 f31139c277f38796408e3c74e0ee03b3
- SHA1 6f47514ee3e274a159d1f866ed9f4ad75c5717c8
- SHA512 b518a8586fbb67083fecb7c77f76243ec41451deab6b5b361a8139975e06540cdcc40d2cd15053a832355f44c98c6b9b55cff346632a8d8e3d57442695afa8d9
- TLSH
  T17911CE937090217910DB98945E45AA2B7A2849EF0200CD8CF0B6C6776B08FF6E6BD280
- MD5 SHA1 SHA512 TLSH
Score

7^/10

execution
- Loads dropped DLL
behavioral9
- Target
  obs-studio\bin\64bit\run_rundll32.bat
- Size 198B
- SHA256 167591de667d47b1303f9b98f860ad8a4c2926a7ad503c792fee5872f77020a3
- MD5 ac2a1f05f12a65e2148bf479f96e501e
- SHA1 7b9a0477931092dd35a6abe77999803d1f56d06e
- SHA512 f6825342b215097a90c09c01b3c3ac765501ca2ef5f30b4dade09894a84366fd5abfda2e146894a9d96a0368ef9f312dd67d65e40f837c294c22248301c55da0
- TLSH
  T1FED022032C02086180420451554AE69F980880EBE210CA137C9A88B074AA2EA6C2A285
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10
- Target
  obs-studio\bin\64bit\swresample-5.dll
- Size 129KB
- SHA256 15923fc8fb32ea2f8f5454000bdeb7cbabcfe4c4f491ffe65570f116d32f8edf
- MD5 7aa76bd0b73cb5822f18d724f7dec675
- SHA1 c357b09a1310c7b01f6e4bbbd1a9ee19d1957b6b
- SHA512 81c74ef6175bef26bd67cf941f52f9e83a685f94ccdb9a01ed7d7cef4854cc5fe5e46738aeb15b7b7431a128ec68f6998deea67711c06227d8a3d0e7a340daac
- SSDEEP 1536:SH9MrxISu8LN6o16bDyJDbXvw8tqHTwbQiy/Sf1BasCwdGtd8jybfDiiF+Y:SYtuDyRsyQifrac8twybnF
- TLSH
  T173D35C87F9A626ECCA669574D1766603FB20307403956FFB1AC1C2351E27BC09E7BB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  obs-studio\bin\64bit\swscale-8.dll
- Size 616KB
- SHA256 a29c105a5c09c0fe59c7b76087acd7b09b6177f912914d548c2b3edbf3a254b4
- MD5 abfaf3518e777c33fbf2fd955f063c13
- SHA1 006d4b94ca3182ddb16fe32ab6b586f57a8c33f8
- SHA512 3acfbc19ee397319dc498909535ac5d4d14a4e145b62e6f4926204050c6535a2c6d64bf91864d43a040a48f29f0c4d510887e18c5adbfb2125f4ce61b14db8df
- SSDEEP 12288:P1KnJos8P9hR1sliAKgV6ByP9XmCuXjtZlP:PInJos8P9hfsliaXmCKZJ
- TLSH
  T14BD46CC3D29229DDDAAB847485F086537B24702507546EFB7684CA36BA23BD0B73F706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  obs-studio\bin\64bit\vcruntime140.dll
- Size 120KB
- SHA256 184146852727a9db4eea06178716bec3cdbb1015c911f6b0f915b184ad7775b2
- MD5 0d35c5e99871b4f02c490b9fd9dace34
- SHA1 c2280e6285147cd8010becc0cd3a120fca0088e0
- SHA512 114bc156655e0d3249b6f94af1da80528b6695630f548ab596dfb406f6ffcc65276c9f900b637ba9c244ba5a4331aa15d2de0672f6dcbd38cb49a206c100698b
- SSDEEP 1536:a9pCUgtBAVcxStMXcfG8VwfmpcGLOI5Sv+vecbeQ6N7l9gEeza/yLzt:qyA+3EOfmpcGSdOecbeQ6Nx9Mqsp
- TLSH
  T1B9C37B4272B802FBC16BD274C292AE27FBB6B50687605BDF07AA86650F537D06D3C341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  obs-studio\bin\64bit\vcruntime140_1.dll
- Size 46KB
- SHA256 e6bfb3662ab4b1969a73441dbe35c96d51441b6bff8cf1fe7430bd5b246ca605
- MD5 03b43160d21c08de07a79d0a1c5ee81d
- SHA1 0a449093006af667432b83303614b53b62fc0d05
- SHA512 8b835205bf037b78144f0a4a78618a4e74ba087ac9916c83cb25aff266ddcf5c1b859a6e7c6fec2b57ffeee94fa2f52dd7f6e98c387a4ea7a3143fef6a9570b0
- SSDEEP 768:BezSkbhNfI4fWLZyS/dPWxngU907N9z7RV80X9z+:2YZyuPWxn3Ivz7bDz+
- TLSH
  T1FC237E9293BC4086E89B8970C1DBDE57BD38B7D2576093CB1BA5E54C1E537C0E63832A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  obs-studio\bin\64bit\zlib.dll
- Size 91KB
- SHA256 258363896e6b48b2d6c54eec3be59e5334f125d3965d54e82cb71fc1ec59b6b8
- MD5 e0543d86d0c7e300c1fc802fea9871d9
- SHA1 2196e93eb5aabfe1ee5fdf354071b43735c09c01
- SHA512 eed49d129215914e16cce244670539d1bc5904690a83d5c7b123f98f09dae81e1fddab44c057da20be33c3be8973b7b02e2963a9bf82c04a7a233cdac0a5c4b3
- SSDEEP 1536:4vPa6nmXzqbqJHTur51p/f8ygW/GzviVIOcIOOYsx0bitDaJ:8FnUrk51pnyafSOYsx0m0
- TLSH
  T1A3938C9A6AB422A5D6F74574D8D2479EC73170100BA157DF9288A3A90F13BE01F3A3FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15