General
- Target PAS.exe
- Size 9.4MB
- Sample260805-vxnfmscp81
- SHA256 1e575a6a610af1d9fa1d3ccca1ab487775f275ee3d563d34d7f7cfa129337626
- MD5 27d403f66691a50205e997be8435cb0b
- SHA1 ed52d62e68122fbcba03171f79b8402f90f03a7e
- SHA512 49d30f9ccaf1f42dab8af9a63d82d07e5304e539c2c0863d30b4ede34ed201d5c70f08c44a1e8f823bc852cd1dded793bfee7dcb421fb7a04f97047542a338ac
- SSDEEP 196608:1mMLErp3y+u3MujoiIgvUxT/MiP7KQFvQkwcB7oOlR5em07LV7BA/gZ:YMLErp3y+BuHBUZMiT/qK7jSxBAo
- TLSH T158A6339213D70672D9364D3CCD91C14ABD57B83968C154931FF2EB6F29B22C2807BAB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
PAS.exe
Resource
win10v2004-20260513-en
4 signatures
300 seconds
Malware Config
Targets
-
- Target PAS.exe
- Size 9.4MB
- SHA256 1e575a6a610af1d9fa1d3ccca1ab487775f275ee3d563d34d7f7cfa129337626
- MD5 27d403f66691a50205e997be8435cb0b
- SHA1 ed52d62e68122fbcba03171f79b8402f90f03a7e
- SHA512 49d30f9ccaf1f42dab8af9a63d82d07e5304e539c2c0863d30b4ede34ed201d5c70f08c44a1e8f823bc852cd1dded793bfee7dcb421fb7a04f97047542a338ac
- SSDEEP 196608:1mMLErp3y+u3MujoiIgvUxT/MiP7KQFvQkwcB7oOlR5em07LV7BA/gZ:YMLErp3y+BuHBUZMiT/qK7jSxBAo
- TLSH T158A6339213D70672D9364D3CCD91C14ABD57B83968C154931FF2EB6F29B22C2807BAB6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.