General
- Target balloonzfiles.exe
- Size 2.6MB
- Sample260804-wt1ggat1cv
- SHA256 d72076a38bd2a14faa57f998fc2b525b6462b8c881040d8854b8f1b627c7687b
- MD5 aca808d4a33f9e3fe14c1288221949aa
- SHA1 1a0539378b4509e7567046352c59a7b7f5d86a5a
- SHA512 5eafe79fb0644822d5256f9b743acd47f9bba85ee660f41e2867d06f5c7825a0381980255ee15094ae909b0d4cb886482f0c3ef0b2abe9193e5fa0ad96b310a6
- SSDEEP 49152:+uI2hcaHPSFt5AJcHKneimmaBGN2scMDNrEEKY/k1Q6jYe:+5Oc3FM6HMei5aAN2scMDZ0ZHYe
- TLSH T196D5E13FB28B653EE06E5A367A72E211583B7A6165178C16D6F4C88CCF250701E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
balloonzfiles.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target balloonzfiles.exe
- Size 2.6MB
- SHA256 d72076a38bd2a14faa57f998fc2b525b6462b8c881040d8854b8f1b627c7687b
- MD5 aca808d4a33f9e3fe14c1288221949aa
- SHA1 1a0539378b4509e7567046352c59a7b7f5d86a5a
- SHA512 5eafe79fb0644822d5256f9b743acd47f9bba85ee660f41e2867d06f5c7825a0381980255ee15094ae909b0d4cb886482f0c3ef0b2abe9193e5fa0ad96b310a6
- SSDEEP 49152:+uI2hcaHPSFt5AJcHKneimmaBGN2scMDNrEEKY/k1Q6jYe:+5Oc3FM6HMei5aAN2scMDZ0ZHYe
- TLSH T196D5E13FB28B653EE06E5A367A72E211583B7A6165178C16D6F4C88CCF250701E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.