General
- Target 6eq5gvOfRvNmCi54.exe
- Size 2.8MB
- Sample260805-jp2graxydv
- SHA256 ce61700a601d0ed8aa448c1a9ba8729e8433edaeb9104e80df5244e726930e7f
- MD5 1130d78a8cf66a9ddb40c71a2a1757d7
- SHA1 e2b590b10f56d7a713200c1b1419dcd51aa9d231
- SHA512 f2e8173eb2de3f3c94c18b64bf11d35eb235f76747140b89bc59f2f8d77aeb3a1669c2b30bff7a2de05a4f37cc3206580ec6f365c1d74dd74fc5cf4b82a2a4c2
- SSDEEP 49152:cfhoWHqVbThYN4p28ScO335kwabznhI8AxsROcOKXxFFMi5G87UMPoyzuLDsMrEp:c1HAnhYN18mywALhHRgy3MinPoyzaxIJ
- TLSH T139D523DAB9F60DB4C436C7728F57E06EB0AE774096A19E47FADCB510AA53484483B331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6eq5gvOfRvNmCi54.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
6eq5gvOfRvNmCi54.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 6eq5gvOfRvNmCi54.exe
- Size 2.8MB
- SHA256 ce61700a601d0ed8aa448c1a9ba8729e8433edaeb9104e80df5244e726930e7f
- MD5 1130d78a8cf66a9ddb40c71a2a1757d7
- SHA1 e2b590b10f56d7a713200c1b1419dcd51aa9d231
- SHA512 f2e8173eb2de3f3c94c18b64bf11d35eb235f76747140b89bc59f2f8d77aeb3a1669c2b30bff7a2de05a4f37cc3206580ec6f365c1d74dd74fc5cf4b82a2a4c2
- SSDEEP 49152:cfhoWHqVbThYN4p28ScO335kwabznhI8AxsROcOKXxFFMi5G87UMPoyzuLDsMrEp:c1HAnhYN18mywALhHRgy3MinPoyzaxIJ
- TLSH T139D523DAB9F60DB4C436C7728F57E06EB0AE774096A19E47FADCB510AA53484483B331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Registers new Windows logon scripts automatically executed at logon.