General
- Target net8.0-windows.zip
- Size 1.1MB
- Sample260802-y6scqsfc68
- SHA256 de5f4d674c8be426735502f94b3ffe9bcba1e7daa478c7bea14a91a7998414a3
- MD5 9fa3c40a21613c69082290920f2ce388
- SHA1 ca2a3379537df5d717d1cf4530d153d11996c050
- SHA512 9917fb0a23fc891db2ccae97b04706375c2cd79911ecef5fcb0263605fcac3f455e6b894e739dd7c752a34f487d3aa8922984f55c659f92f0e28818512ece5a0
- SSDEEP 24576:naGbOza9PIaDd2uwXtD7Ztc/G6oMxJnoTL+rYeIjBKswemnpW:rg0Pf2uwX57ZtaGS8L9jcs5mnpW
- TLSH T1C9453346B9064ADF6B7990F3FBADBDF1466801B9139EAE1874AF3D31470D27806844CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
net8.0-windows/Guna.UI2.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral2
Sample
net8.0-windows/System.Management.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
net8.0-windows/boogeraidstest0_1 virus tool.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral4
Sample
net8.0-windows/boogeraidstest0_1 virus tool.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
net8.0-windows/runtimes/win/lib/net7.0/System.Management.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target net8.0-windows/Guna.UI2.dll
- Size 2.2MB
- SHA256 3d4143bd0ce708ba372f20301dced8ef64c6c47291f9f88c3bd569fe1bf8c91c
- MD5 e53ab58ce8f89f763049841bd7bd968a
- SHA1 adcecd66dca7dfa22b5c3286b0e1d9a930be3af6
- SHA512 dd563f91ca5fb7c26070b7196d2845439159ff044f75a0e0bd559e32a124d0cf705703d10c3b0c5fe292b7e790743e8dd748618fc7894b155517d0ecbaa4995e
- SSDEEP 49152:Ch9IEsCPBOYYmmHwaOT9PxHJkyPdey0p5GFw:CInznHUdxy1X
- TLSH T104A50A187D95D727D23FCE7395E60011E3F1E4522BB2FB0926D367A8184378679823AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target net8.0-windows/System.Management.dll
- Size 72KB
- SHA256 f515ca5c944c332ab706ff0a7c2e53e66d0d9d8a663e9b2691b35129ee22559b
- MD5 1c71e5310151ce1e9a3a92797776bdad
- SHA1 fd452b874fec4a9dae61a3710fb32749dc7d701e
- SHA512 2a4f18c77449c2d06a3ab6807338f73b03b1faa332e78319829ba3a2b6fd98bb9a83c5e29b47d55e4ce7f0dfdcd8524fa592a0f3ca8ee09daae2894b681265a8
- SSDEEP 768:BrEP45HksbMU3se5c/0b/9nLZV1BCUkVoV0lP7H0CkkiSLJKdbY8Mtuo0eDQP9zu:bbz5wulNV1zkSQzHxkxS9yc8no0nzu
- TLSH T12773C410E7E88378C8E707B6B5B3A3214F74B5C52F22D61D292A611D08EAFC15765E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Drops desktop.ini file(s)
-
- Target net8.0-windows/boogeraidstest0_1 virus tool.dll
- Size 8KB
- SHA256 bdfd6dc48b8c13e2236f7388f9c851fc0a2f8be4e3baec8f3fae04cbaecc122b
- MD5 19d2294d29b71a54a42f3743b6c1d67d
- SHA1 dfe3b852caef4d8c3b9d5702d0b443569d3e3353
- SHA512 79dbd379f4406c2da9db7c42740b2cf09ddb0f2bbc186f98f6997e5163b527032e403b0a27d816a803977db34b1e76ddf13176400d5151353eec320c31fa93d0
- SSDEEP 96:7MbrO5h9FkUaHPTDzvcaTt9z3niuNfwDvkFhjCFAAPFTREj6MqzNt:I4FYPzEm53iuNYDvIqEi
- TLSH T183F11A24F7B48232ECB61F31ADA255821736FB569C93CB1D6441441F9E1BB1046F37A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target net8.0-windows/boogeraidstest0_1 virus tool.exe
- Size 148KB
- SHA256 b9fa42349cd24480a6209698360d0e24ea028da2ae76bc9a44b9f4ea113b97d4
- MD5 70f785657eb8c158900b386cfd114f05
- SHA1 748f0db14b1c58758d464f7799783d8fdbc4e41b
- SHA512 90c74fbc80cd04aabe728a66e804aa5c25c5683c1b935e82275da645ad71ff21ebdadc9d4aadaa022cd636c45cc2a8d4bc1f0e4277c23f16e4de12abbb1a2925
- SSDEEP 3072:5qeXA/4yIbHkNPN+6H6xCYOigUE265CJr:5vdHkNFdaxmMEiJ
- TLSH T142E33B07A2A851BDE1B7D679CD924D41FB7378598B71A7CF03504AB60E63BD0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target net8.0-windows/runtimes/win/lib/net7.0/System.Management.dll
- Size 288KB
- SHA256 a7e248c3e6f25f4673e2006fa77f4a4322a3c74c2652dcc395178329feb7ff28
- MD5 76e0aaa7182e77403bf6fe2af8d90f28
- SHA1 d013c5d649f9ebce5bee1c8b774f3290b1f1f532
- SHA512 8e161a375fe174d9b203c2a098c92aff411d8521eef133d5174ae7409c394157f7a067c2a9dfe3f76cb02acbed52c33a11579b9a1cbee75e4092e6487d1a7bc1
- SSDEEP 6144:TMbKUVLmD7HP9ab+T5sBFzPnQpEZFAc2Q:45VL2Z++tw92Q
- TLSH T10654195033F841D4C47FAABA903161958FB4736BA60EDF9E1452FCED1AF1B81960326B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.