Overview
overview
8Static
static
5AI_Install...de.pdf
windows10-2004-x64
3AI_Install...de.pdf
windows11-ltsc_2024-x64
3extra/launcher.py
windows10-2004-x64
3extra/launcher.py
windows11-ltsc_2024-x64
3extra/main...64.dll
windows10-2004-x64
1extra/main...64.dll
windows11-ltsc_2024-x64
1installs.bat
windows10-2004-x64
8installs.bat
windows11-ltsc_2024-x64
8run.bat
windows10-2004-x64
3run.bat
windows11-ltsc_2024-x64
3General
- Target Clarity Makcu V2.6 - Free.rar
- Size 78.6MB
- Sample260805-yfna4avdle
- SHA256 959b5da0362bb7bd6f3e72da784ff2a1178d219947b97aba70bcbc10d25cc2f8
- MD5 893236b1e7c1cb054b13e069a455f094
- SHA1 45a9cbc67e527f6928d63f00bf99596a7ac6f640
- SHA512 dc5925f4a92e9bbc65260940de35a3c0a5ade8bd616794041339fed3992b46797dcac27befb6d31ff90033751666df4de3277ffa020373fdb6ad531932c8174a
- SSDEEP 1572864:7p+cXHst79oL+VByYfYR7b9l+vLf0eq0IN/T7vvU4R3v2nHkWjXi5rV:76K6LycYR7LcJrIF7XU4xtkXG
- TLSH T1E50833F66A471B7CBCAC7578A2A1474DACECE3EB4E85D726240A35323E570F0B305295
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
AI_Installation_Guide.pdf
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
AI_Installation_Guide.pdf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
extra/launcher.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
extra/launcher.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
extra/main.cp310-win_amd64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
extra/main.cp310-win_amd64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
installs.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
installs.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
run.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
run.bat
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target AI_Installation_Guide.pdf
- Size 17KB
- SHA256 2a6227b91fa6adb672220af14fbd56f5efeffbe1f59b5d99e72ef606ffb9a2a7
- MD5 ef54d8c12e98438103611becc7533cac
- SHA1 0be3e070c67ae48562ca7ea858c96a96f28440cf
- SHA512 1aee752fdea4e5f8be15a89df3fb6d69e1ad9c619dc1ad843a90d0b9130ee722211826addd62d0a46de761197e43bd29a19f9ae0ce1c2303a25424c6f9f8bfdc
- SSDEEP 384:uicRNqn6sDO5FP92N7dJTvkmw1NOPk9BAUqi0by4jiKEq+JBXMHUPAfi:uicRNqn6sDO5FP92N7dJT8mw1gPkXii9
- TLSH T19B82F95FF80C0CBDE582CA51DA2B395D436F7039DCC9688418BEA602E08E539F657BD6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target extra/launcher.py
- Size 490B
- SHA256 b1118a792e0b1ff20dcfddda6259f9582f47ad04852ef530364c2eabbbe1f8e4
- MD5 4ecdd478b622ef0c4fa137146bae7ebe
- SHA1 6cb76ef8e7c149398332fd5b4afeda028aa7f687
- SHA512 8ee70b34155dbc3c79f2ec280a88f4a81fcf090a32571c3e0824e29bf2173bb6c058ad5eb0db7c0015158e784fe22c053db4e9edcb0e21ac10bd30db9f7078d1
- TLSH T143F09EA305FE28092183F790E9C808F15DD65DE67657A8005EED47F18B028B0CD89119
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target extra/main.cp310-win_amd64.pyd
- Size 1.7MB
- SHA256 79c9e1077d18814c0fa2d455a8fb9620e5c0f47e20280f23dc35e28373adf5d2
- MD5 47a5c00e7a442abdf7add60540604033
- SHA1 a6bf4fcaffc8495327e71226246540eb454d0337
- SHA512 8cfcc53217923fbd7c0a8c7a181f55cede9d5033c63f4d5d8f159b7b34875d6a7c10953fd372143ecc804cf0cecf77891cbc3129d38bd4622ac7da0b1968183c
- SSDEEP 49152:d1SWV4dCeCZTDP1VSrdc1XuhcfwMxoLQCreV:dOdCeCZTDP1VSrkXuufwjreV
- TLSH T1A185F843E7B180D9C56BC4386A67AA33E961BC4C82347AE69EC4CE303766F60536DF15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target installs.bat
- Size 4KB
- SHA256 1576f924c091b697b767344b7d518b63377e47d9ad4b7df9037160953c503676
- MD5 9062c63653c95a695f6ae190c85b2cf2
- SHA1 21dcdf7d8e59483f3cb3a9292191f1c0238322ab
- SHA512 f50518e0161b17fc3e49d9615a20d72b39d1cdeff0ea30a9feb7996de481ea38b836d07c1f0c8f0a204dc49393de5405af250136b85b2a25660cde64b3a84a49
- SSDEEP 96:Jk1TM0KNImTyK3+pmSypa25UekKnsjcJEIehqX7sFd+jnng3+MkX82LkIwR:Jk9MpImnU3feHJEh8gKnng3nkX8QkIwR
- TLSH T1D591840B37544375A77887268F2E15E1BB15829341412DF8BAEE06F81F443E0A9FB696
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target run.bat
- Size 1KB
- SHA256 be85d43a50af84de17d180aacc667cffbcc6666ea385435e220918195da3a475
- MD5 b1690f3ccaaebace247aedbf97d0eb60
- SHA1 56f9b27472aaa31053bad1cd1b5f845ba40101e7
- SHA512 862840f3d10b979845147d1f4dab11608b0d8573c9c1e2c3ed9cc5c66de8779a2afc84217ed74afa990b46a29cd820f11c54863726b4a1a9e814448f5c6ee6ed
- TLSH T18131CC1338850576667D82678EFD02A1B79DC0D300843EE8B9DC51989F4C6E16FF5BCA
- MD5 SHA1 SHA512 TLSH
Score3/10