General
- Target Update2.zip
- Size 413KB
- Sample260731-amf9cszepf
- SHA256 f41cd4797b5546c914f4046bc4a303d358f3dd51ce2cfde635191103acbd149f
- MD5 76405355f6ba20c0fe4987cae7483ffe
- SHA1 e8afaa2d263ddda43e43acf4bd7679f3e931934c
- SHA512 50b283ad825d3d5a917c7473e16fdd86e616e78ab03a6aaae5efd7fe52d6eaad360a513861576e4c2906644b475103f282e748c73c0773240de252589a225ddb
- SSDEEP 12288:UK/8XP/aCXo+5s+GVFV6MJwoFe8LopCqw/Hwr4W5Fa:FkXPyCXo+m+G9Jw8EpCqSW3a
- TLSH T16B9423F70B111C957B2C3F4853EC1328BBAC232958AF89A7177C5B9A1F043E05B9A5E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
IObitUninstaler.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
IObitUninstaler.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target IObitUninstaler.exe
- Size 553KB
- SHA256 03b4ac7edc79af0cf3c2c1e6373e46781a0d9f9dfa4d3d40c69a960ae018c47b
- MD5 8700019ad536d462f915fb6765e871e0
- SHA1 0f373a2da0bdfd1c9ca6bf24e766d34931b5dda8
- SHA512 09a5f1dec03f5c1831b77a33d6f1e761c6f8e808b0d3afc7f10c3f6020d22999b0079b68163994702912acf24b1fd9380278255c29aa452f91e8257385f05883
- SSDEEP 12288:K/sf+vtw5SSczFl6mJwo/e0LopMqwxHwrmD:KEGvlS2dJm0EpMq
- TLSH T152C402CBAE4106F7C62DF53005B7B33E172BA97D2BE78E1E921F6E1A2B3164C9915140
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 25KB
- SHA256 33b570d86c4aac8c6785944f9b2992dc3eccc99e35c20ab79d81917bbef35622
- MD5 7f6837692e4c3ee810fe8302b7e0db99
- SHA1 2dff99100da9588dd828fc4436a82d0b1a9f1354
- SHA512 923d20a4396a788f2073ee9a1f34c7a74013e4a424a39a1b0bc14c1533c0c496e06e3ab702debfa193c84adf909203db8bb9ad52cad436c4d7a3b5cde6776678
- SSDEEP 384:WZ2pfUx9eVLwDKO9XYD/isN7lCEjgwMU/ktKi+R45Duwomq8pqdDvHb1Q:Wr96YIrx7lC7vU/kaG9uLmCdb
- TLSH T120B24C07F38398BFC50BC1B186EF5772AA32BE211B616F6F1220F5756E24E90871DA14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 14KB
- SHA256 1772a9e4605b6085755e4d9df885954fa04b784714b7156ea5c91850cff0cb9e
- MD5 d049e50b5289e32a79db6de19ff1e8d5
- SHA1 731159c420e2c602fa51ac52ce9d989b90d6eae0
- SHA512 e5da1050f04aae3597083d301d3d579f6fb7fa7c661add8d68dd73922a2d6ab531cfd008e4dec733d29ae5cb5fef4f9e05d29ad414c6ea8300e77bea669cc7fb
- SSDEEP 192:CZWhF6MuqMgfdPvg/YWkNLiY8vSKXS6Hn5gIIblaks8NHAHKEdeqe4KFz0:UWh4MFv1w/YWCLXASKi6nAlHcAl4KW
- TLSH T19852191B7782922ACD0AE374D5EF573322F3B4551138370E0669DB49BFE1660DA39288
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10