General
- Target Free-PakBypass.7z
- Size 20.6MB
- Sample260802-sd2stavhlf
- SHA256 d71ef5709b2bd43797ee644663c486132df2f597d474ed60ee0447205bf0eff9
- MD5 935c3ea275d8b50bfe2e1f5935519518
- SHA1 67a523b722603b8b39a3ed358255825bf1e82282
- SHA512 5e48d70154cd812917b520ad60a3dda25e4786287b1a6f292ab60d6c1258d9da2a7c35bc4517381c7746249003ad2a8b6d3ce53d619a01682bbccaa8ac8152fa
- SSDEEP 393216:dhHzgOYVJzyf1Y0/ymdQYnKwDYM5qoe1cNrSg77H7eL7LB+ybCcb+Tq:dhH0xkqDmdQwNqXcNBH7ekyGcbp
- TLSH T1FF2733FBD249FBE263F50B71E4770E289C71155AFFBE6E11AA8ED3411CD00EA0842919
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Free-PakBypass.7z
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Free-PakBypass.7z
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
Free-PakBypass.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
Free-PakBypass.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target Free-PakBypass.7z
- Size 20.6MB
- SHA256 d71ef5709b2bd43797ee644663c486132df2f597d474ed60ee0447205bf0eff9
- MD5 935c3ea275d8b50bfe2e1f5935519518
- SHA1 67a523b722603b8b39a3ed358255825bf1e82282
- SHA512 5e48d70154cd812917b520ad60a3dda25e4786287b1a6f292ab60d6c1258d9da2a7c35bc4517381c7746249003ad2a8b6d3ce53d619a01682bbccaa8ac8152fa
- SSDEEP 393216:dhHzgOYVJzyf1Y0/ymdQYnKwDYM5qoe1cNrSg77H7eL7LB+ybCcb+Tq:dhH0xkqDmdQwNqXcNBH7ekyGcbp
- TLSH T1FF2733FBD249FBE263F50B71E4770E289C71155AFFBE6E11AA8ED3411CD00EA0842919
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target Free-PakBypass.exe
- Size 24.9MB
- SHA256 d29a2aa9d5077e234f910106c138fa55745b9847f486f04803f31909b8913cbe
- MD5 a8b048565f82608c6eb165df56fd7034
- SHA1 9b6d20010c1eee201cc003bd1773ba4beabce703
- SHA512 a2965bfa97b23b472901ed64ee35033a6712d0271c5356d4b480315c8c13e5a06337755908fdc854fcbaed4ac8ee63324c9128a32333d5862f68c2f475fb4d60
- SSDEEP 393216:wmJVZ9x9ku6st4f1atU4317VqWCZNdMJPKD0/GAyflIypETC6BXs/o3W2EC:w4Z9kwucH31jCUygvcmu6B8g3jEC
- TLSH T1154723E7AAD973E4E3934D38D28B138773C1215EDA974A1E31CAD8032521D978746E3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger