General
- Target Risxn Tweaks.exe
- Size 14.7MB
- Sample260801-e28z5sdf46
- SHA256 49e6e81ed82fe7644febdc86b9f0ae9738f802477362b66a8c64f64af26340d6
- MD5 f1931894a8f7f3755ae3d2ebe25c4325
- SHA1 b57d47b8560f9c4916e716a537cc97e3c1de45c2
- SHA512 da917c726eee8fa3e16ef090e1d6ee12d14c2604d31e73bbe8abbcf7380bd273d96c66dbbc5233eb87c65e99331cc13a6df1e23c392e5789c91f5acbe1a015bf
- SSDEEP 393216:0qWfDSVXziFf0OY4jmlcR0LKChTXqYu+UUzHsxtEDweoiG14/:YfeXut0OY4szru+5wt7en5
- TLSH T1F9F633F27BC3483DE4E931397DE45F3752A6B220076085EB57A81DB996B22D4EE34B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Risxn Tweaks.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Risxn Tweaks.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
warning_script.pyc
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
warning_script.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Risxn Tweaks.exe
- Size 14.7MB
- SHA256 49e6e81ed82fe7644febdc86b9f0ae9738f802477362b66a8c64f64af26340d6
- MD5 f1931894a8f7f3755ae3d2ebe25c4325
- SHA1 b57d47b8560f9c4916e716a537cc97e3c1de45c2
- SHA512 da917c726eee8fa3e16ef090e1d6ee12d14c2604d31e73bbe8abbcf7380bd273d96c66dbbc5233eb87c65e99331cc13a6df1e23c392e5789c91f5acbe1a015bf
- SSDEEP 393216:0qWfDSVXziFf0OY4jmlcR0LKChTXqYu+UUzHsxtEDweoiG14/:YfeXut0OY4szru+5wt7en5
- TLSH T1F9F633F27BC3483DE4E931397DE45F3752A6B220076085EB57A81DB996B22D4EE34B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target warning_script.pyc
- Size 11KB
- SHA256 3d97bd7bbedb141c979a2b1cb39ebdb3d7783997e7a0c42a99a85e85d0f0ffe2
- MD5 b7b11c92338e915b21ddd000fb4b3b38
- SHA1 6de21784704bd693d235170a0bd5ea05ce440681
- SHA512 1fac07e102835ed1d7e09f74abd7bddd86a6106a37f2eb5730c7fb367fd51f29ddaed848c0fb9d1fec2c44ef737e996b7abdca59876d8db46a4240d749ed72a7
- SSDEEP 192:b2CxOu4oZF+Vi0kKbTHElFyzmzoCvNFA2UGJYpktcM1DIRl:KGWY+Vi0bTmsCvNFAY+pUCv
- TLSH T1934219FE8D40666BD9D6E07072D684A67373C146B212D302B428DD7DEECA629A4E470E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10