General
- Target 3162dd66e99834d7f5aa33aa80c94d828707c8a121b0aeb79966b61f7eaa9aa4
- Size 1.4MB
- Sample260804-k2mpssweka
- SHA256 3162dd66e99834d7f5aa33aa80c94d828707c8a121b0aeb79966b61f7eaa9aa4
- MD5 be56f81aac89f1f901a9af59013d61f9
- SHA1 4a637d4ed32f753d0c4b024b3f60e34d5310d280
- SHA512 da608fd0c0b183be55ab1d833565a9401b312eca2d567bd269f46b86d72036fcc552525017194ff0469c3a64c4b221c6fe560bbd42638259a0950e8300439178
- SSDEEP 12288:6DvmwGwFFYEhJhcPQAr2pFFPclVl+owFFYEhJhcPQAr2pFf3fKf:6DvowFmuShGPcdwFmuShi3fKf
- TLSH T17C65B45E3E8A72D9DC2FB03FCB11B5629633686802D15A4BE1957D1D0B4A084FFB9393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3162dd66e99834d7f5aa33aa80c94d828707c8a121b0aeb79966b61f7eaa9aa4.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
3162dd66e99834d7f5aa33aa80c94d828707c8a121b0aeb79966b61f7eaa9aa4.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 3162dd66e99834d7f5aa33aa80c94d828707c8a121b0aeb79966b61f7eaa9aa4
- Size 1.4MB
- SHA256 3162dd66e99834d7f5aa33aa80c94d828707c8a121b0aeb79966b61f7eaa9aa4
- MD5 be56f81aac89f1f901a9af59013d61f9
- SHA1 4a637d4ed32f753d0c4b024b3f60e34d5310d280
- SHA512 da608fd0c0b183be55ab1d833565a9401b312eca2d567bd269f46b86d72036fcc552525017194ff0469c3a64c4b221c6fe560bbd42638259a0950e8300439178
- SSDEEP 12288:6DvmwGwFFYEhJhcPQAr2pFFPclVl+owFFYEhJhcPQAr2pFf3fKf:6DvowFmuShGPcdwFmuShi3fKf
- TLSH T17C65B45E3E8A72D9DC2FB03FCB11B5629633686802D15A4BE1957D1D0B4A084FFB9393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare Tools registry key
-
Executes dropped EXE
-
Adds Run key to start application