General
- Target SystemUpdateService.exe
- Size 31.0MB
- Sample260731-vcs6dsx1ez
- SHA256 8a387435c458acfcada757ccc4eef3635dc833058717b6bb39936246c79225fc
- MD5 fafccb1865d84182352de1027554deb6
- SHA1 a64a6eb869d15540b274e88787ce5770bcff9c55
- SHA512 7ac439514548877c545fccde887ed4fbc6a8110bab7fbbd8b113cdf8e1e78003017386b62f941e879301e1aa629cdfbd7d3e60408ffa69198b6af015b5a1db60
- SSDEEP 786432:wPas/xJ2heC8W6c4aS+aW+NjXOjTNGCgK/2CrFA1QS8FeuA:wPas/X2heC82TSdNNTK4C2CFOQS8a
- TLSH T11D673360A68015E9E1DB6A3DE155C86361BCF5DA1B31C8EF41E0E2930F932F1A638F75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
SystemUpdateService.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
SystemUpdateService.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
payload_built_stealth.pyc
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
payload_built_stealth.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target SystemUpdateService.exe
- Size 31.0MB
- SHA256 8a387435c458acfcada757ccc4eef3635dc833058717b6bb39936246c79225fc
- MD5 fafccb1865d84182352de1027554deb6
- SHA1 a64a6eb869d15540b274e88787ce5770bcff9c55
- SHA512 7ac439514548877c545fccde887ed4fbc6a8110bab7fbbd8b113cdf8e1e78003017386b62f941e879301e1aa629cdfbd7d3e60408ffa69198b6af015b5a1db60
- SSDEEP 786432:wPas/xJ2heC8W6c4aS+aW+NjXOjTNGCgK/2CrFA1QS8FeuA:wPas/X2heC82TSdNNTK4C2CFOQS8a
- TLSH T11D673360A68015E9E1DB6A3DE155C86361BCF5DA1B31C8EF41E0E2930F932F1A638F75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target payload_built_stealth.pyc
- Size 15KB
- SHA256 385d1747d5a9a25fd83a1cc30f3f49028dcb67fd4f8ef2e89891ca20a6f6d218
- MD5 4bcc44e6174345c327913e0b93e6da64
- SHA1 1a660cdeaa2be234f8620b89d0e39f7a6f5be545
- SHA512 e60ec57d723f7c73fdba40c578f088bcfd327c5b91e1f3a8979b455eba20ba46462418338f5367176f0a4f55c405bebdc99adc322f29c896d7f59a0c61213fd0
- SSDEEP 192:KCEywjygiPHrIBhYBmCOLhh8z3J81o08Rtax2Jd+8GJOiPFMcIjs:D4jyg2H8Tbc56ohtaqd+lOjVjs
- TLSH T18E62078BAA504022FF95F1B580F58454A32DBFC3B650D392310F13B90EDABBEDA45329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10