a19d399f6b88b06fa369d896027b563dc5668241c8d9098516af2858303f8055

Resubmissions

02/08/2026, 09:55

260802-lx88nsxvcw

02/08/2026, 09:49

260802-ltdmlagd237

Sharing

Copy URL Twitter E-mail

General

Target
Maxey's Visuals version-145f189a6a974303.zip
Size 7.0MB
Sample260802-ltdmlagd23
SHA256 a19d399f6b88b06fa369d896027b563dc5668241c8d9098516af2858303f8055
MD5 f0fa95490be4d3375110d5622c17f065
SHA1 cfed818f060a13fc8793867b433fab06c1b44683
SHA512 1800cbb6dd47b09bfe86eb178d03d6bb71eae6694d75b482c9950e7d48c0a710c17e9b1ae772f5cf4dc6c9858b38c078eda1d349e46dabb101d876c58db60ee6
SSDEEP 196608:Chc9kMfKETYhENzTOm3o6KXMRtuWASlVrPZ7DD:Cy6y/J4d87udEx/D
TLSH
T18E76339D5ECEF217B62111D1119F3B4C9A32EDE2411D8AF2CF939649C51D2CACCC68AB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  Maxey's Visuals version-145f189a6a974303.zip
- Size 7.0MB
- SHA256 a19d399f6b88b06fa369d896027b563dc5668241c8d9098516af2858303f8055
- MD5 f0fa95490be4d3375110d5622c17f065
- SHA1 cfed818f060a13fc8793867b433fab06c1b44683
- SHA512 1800cbb6dd47b09bfe86eb178d03d6bb71eae6694d75b482c9950e7d48c0a710c17e9b1ae772f5cf4dc6c9858b38c078eda1d349e46dabb101d876c58db60ee6
- SSDEEP 196608:Chc9kMfKETYhENzTOm3o6KXMRtuWASlVrPZ7DD:Cy6y/J4d87udEx/D
- TLSH
  T18E76339D5ECEF217B62111D1119F3B4C9A32EDE2411D8AF2CF939649C51D2CACCC68AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  FeatureModule.dll
- Size 26KB
- SHA256 b77934ff943bd4ba94a49fb7b04350c13f0eefa34f5a34baacf7bec51f2bef63
- MD5 e90686e0d7aee9f5c52a345661453706
- SHA1 5b2971e413d5421bc9fbd9d103e5d160b5f89562
- SHA512 c7163916708d367de6c8c4d9f7684fc1c03475680b0ad4c7250f8683285478af91603f43f86f4b2eb68b0d2fc41eee34ae43b8b56ea97ca5b937e28a9e97ab02
- SSDEEP 384:EkIqeySVyRJDTEoIqVPGwxqgrsJ/RuZoijtBKYkOlCtNRuZoijtBKYkOQnfhkZj8:Bey5RJDQoIqZlxd/B6Io
- TLSH
  T114C2422ADC27E12BD35D8CB4C9134C15ED12ACD6DBE5B5CBA7410CE60865FE8AB3D201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  NewInjector.exe
- Size 3.5MB
- SHA256 98bcbf591d88ebe120d8a79a7f16f6773acbe9f499047f38ee3bbe3e6fc3419a
- MD5 44656f6b25ceef4765c57bdbb027a8f6
- SHA1 fb054cfcc1a568e01f1cfcff482642a861f7235e
- SHA512 8c918d3be12c7fdd05e8a370dd5d43a8d5ed1375391bf07a3c3b96f29f9d4868be645725fca43002f24a43131a196385c63050db831d1d3feaa5c58a452af4dd
- SSDEEP 98304:PWuK307hCUdXDKPgHpL+8zXX/63f+B4PRm:pKdURDdpR/k+0
- TLSH
  T106F523FA69DA2DFAD003CBB0514B326DB46B7F8207A54D8B37DA29434E171199CB5F02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral5 behavioral6
- Target
  NunitoSans-Regular.ttf
- Size 135KB
- SHA256 e2e28393b77e81bfac576c294de53b52b9b163e632ae8a8b92325e270dfcae4a
- MD5 05f376c99895ad997a49c579d385d589
- SHA1 ca3f0c571f343961d9d333d53926262f1e243398
- SHA512 aa3ed4508f8f6a8fb7418a8dfb3d419c2fb92b170c6b5c889d7c138e3fc160455c4bc1fdc47d0716fd194acbe6721c058fc102b8f045a4844d66fc80761f59e4
- SSDEEP 1536:G8zCxfahif9ZnrNPtN7X7t13OK6kl/UAe8ulK6kl/UAe8zDXyd0o3/JylwHTGemj:9AVv/ty1JJHTG91jGBkqVPXi
- TLSH
  T1D8D32913B703A35AED062E798BB2D3E4A3B1FD512F66CB0FF8462E5DD85B1C40992641
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral7 behavioral8
- Target
  eurotrucks2.exe
- Size 3.8MB
- SHA256 5ccff9e533fad2e76fad8f4a6088efe0cf20b477390cf6123703dec5b06c9a0a
- MD5 bf50488174a81dc8a618a1afa2bffba5
- SHA1 cd3a08cd4ce50ac53eca0195f2364566cfddc8e8
- SHA512 4ba30a846bee2b0ce3f73df776f97987133a460493d6120b8cbc404a7e28870a3f9cb5171240cad9e0be649a9f374c01f5ff631ee63d0e99945ebb7177932dea
- SSDEEP 98304:Er3czigDMim1LE3vUx9qz5Pjmcz26aOx5mZO3qaz1dlwC43vncfb:MczigDaI/UjqzdJ66ldjsC43g
- TLSH
  T17606238878CA23FAD25BCB70494178ADBC193BC8FC928C0A76CD19508D177957E7D39A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral10 behavioral9
- Target
  loader.dll
- Size 19KB
- SHA256 703159a8f47bec4bf6c53066b31b1e153405e93754062ed9ea5af5ea0ed51b9d
- MD5 a86ef5b3dd5bc9ca386251dbda11ec60
- SHA1 26ca12a145088a4b0e29b80d0a134d5d0b043fb4
- SHA512 a088633af8acb9ee024e3cd98d75fb3ff1c3436985d80ea62cacfb235f132146c2f84fd6d7a459c46b8ffc1b80849e60f0490d86cfbc6cc3ba528513dee6a6c0
- SSDEEP 384:eF8M0lAMxJSZ+d/UCrZzzi5DlFm+xiEqpnm:e6fuMxJXOCdzzi5iEqpm
- TLSH
  T1DB92299AF32108B5EA37C278CA33C4268563B1076B3357DF7BA9421D0D72BD42A39A55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Service Discovery

T1046

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Suspicious use of NtSetInformationThreadHideFromDebugger

Checks computer location settings

Drops desktop.ini file(s)

Network Service Discovery

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12