General
- Target ToolVision.exe
- Size 33.3MB
- Sample260804-vwwevswbqd
- SHA256 3fa51dd1498184ec6cdcadada6092fb67dc10ff8d36e5639747edfa211b64e60
- MD5 c0a935516ea9ab41ac9c5b1bbf9f4fd2
- SHA1 c4b37e1e3bdf19d91af98defc2fda17ff0630735
- SHA512 a83ff8b8ab6a75ab15c516a1da4b0be95301c3548dd636d84c84d0ef58e45c3aab925b1f06f9d6661acde99da8998ffaa17459f6540e544c623a288642dae579
- SSDEEP 786432:+zlRwFns53SeKZRJYM2WMfqarSXrPM8m0NzAfgWjBQKs:ylRyn2Ceu4/WiOXrM8ixjW7
- TLSH T16477331CD0F662F2EC4F627A5457F562D04A1A2A4F7D47AA9CB2E6BDF203980FD40907
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ToolVision.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
ToolVision.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target ToolVision.exe
- Size 33.3MB
- SHA256 3fa51dd1498184ec6cdcadada6092fb67dc10ff8d36e5639747edfa211b64e60
- MD5 c0a935516ea9ab41ac9c5b1bbf9f4fd2
- SHA1 c4b37e1e3bdf19d91af98defc2fda17ff0630735
- SHA512 a83ff8b8ab6a75ab15c516a1da4b0be95301c3548dd636d84c84d0ef58e45c3aab925b1f06f9d6661acde99da8998ffaa17459f6540e544c623a288642dae579
- SSDEEP 786432:+zlRwFns53SeKZRJYM2WMfqarSXrPM8m0NzAfgWjBQKs:ylRyn2Ceu4/WiOXrM8ixjW7
- TLSH T16477331CD0F662F2EC4F627A5457F562D04A1A2A4F7D47AA9CB2E6BDF203980FD40907
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to get system information as a root user.
-
Loads dropped DLL