General
- Target loader.exe
- Size 84.0MB
- Sample260801-m1bl9ahn9s
- SHA256 4f4f8bfef2fa77ce873a42adab47b4ce0d8150f4c59d09ecc044793c9400dd49
- MD5 8849a8881df71b7e3b78d0ead67fc2c2
- SHA1 d98e8d03c0bcddf4b3b10aa87908b47212f7d3ef
- SHA512 656757398b8f87e2a90a0962f2c9f02447ceb203ce717ca84f438ca7108cf3c10209d71746096246797f9942da3eccafcc1d61a726fcbd6ec900a059caafad20
- SSDEEP 393216:sjAPfF3dNPVLCEDLQzH2ciIrHW4H//o3BdUMK1gC9wN:oAjLCEDLQzkIL7/wjUBgC9wN
- TLSH T155183352742506D0F76132354810AB1A85B9F8331FB3D2AF165C915FCE9B3FAA877EA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
gonza_file.pyc
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
gonza_file.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target loader.exe
- Size 84.0MB
- SHA256 4f4f8bfef2fa77ce873a42adab47b4ce0d8150f4c59d09ecc044793c9400dd49
- MD5 8849a8881df71b7e3b78d0ead67fc2c2
- SHA1 d98e8d03c0bcddf4b3b10aa87908b47212f7d3ef
- SHA512 656757398b8f87e2a90a0962f2c9f02447ceb203ce717ca84f438ca7108cf3c10209d71746096246797f9942da3eccafcc1d61a726fcbd6ec900a059caafad20
- SSDEEP 393216:sjAPfF3dNPVLCEDLQzH2ciIrHW4H//o3BdUMK1gC9wN:oAjLCEDLQzkIL7/wjUBgC9wN
- TLSH T155183352742506D0F76132354810AB1A85B9F8331FB3D2AF165C915FCE9B3FAA877EA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target gonza_file.pyc
- Size 4KB
- SHA256 1ffbf0002a96a768c76e894390c6f72232bc4690c1b3c69648239527b71f7b84
- MD5 244f1f6ccd983838b99120e4e893ae3d
- SHA1 189b9fd43892d6f597ac45bbcf6d6e38ac72fb20
- SHA512 33f303fc41a555624b52bfc80b83982628df20b69323578a9df1ace1d87c88da031695fb09020bc6334af26fe6c0ce1f0d426448e226b90749aff6f113448906
- SSDEEP 96:frjNJ4ikaf0oTmsoIwmWoaK8n35aPXjDaeeeW5a:vrdk8TmowmCQvjDaeN
- TLSH T1CD914C456968347AC6F5AE78A0F0BFB48F1D26549B88F901028676F4DE0EF62493350B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10