General
- Target RiftLoaderV2.exe
- Size 59.3MB
- Sample260806-p7drasbr3s
- SHA256 54fe38d28929d16d2473f4556fa77eb90f9f20c8632f543a90611040747ecf0a
- MD5 fc9c1b91f4801601f6576fb9a39dc729
- SHA1 d871df1d83443a083e348e43994ebc7dde7420e4
- SHA512 60a7021c0a34f9750c5fadfa532cc623eb3a6e011df5bf6513043dc20d4b4f6d587af1ce3e29c301fc5637eb90f41f66f3000cbafd378d6f5c960f8f2a3924ce
- SSDEEP 786432:WOEdxdqtoD5YGJRRqG4ALlbs6B3ZGkwAH3vJ5An49vDt6IU7TaKzrGdX3oe:W1Z5bXQ4s6B3ZFw+5A0I+1o
- TLSH T1A4D72357A9DAB3D8C4830548A68B13CB11D9E479C9FE86183FCF6C036530EAB994D673
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RiftLoaderV2.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
RiftLoaderV2.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target RiftLoaderV2.exe
- Size 59.3MB
- SHA256 54fe38d28929d16d2473f4556fa77eb90f9f20c8632f543a90611040747ecf0a
- MD5 fc9c1b91f4801601f6576fb9a39dc729
- SHA1 d871df1d83443a083e348e43994ebc7dde7420e4
- SHA512 60a7021c0a34f9750c5fadfa532cc623eb3a6e011df5bf6513043dc20d4b4f6d587af1ce3e29c301fc5637eb90f41f66f3000cbafd378d6f5c960f8f2a3924ce
- SSDEEP 786432:WOEdxdqtoD5YGJRRqG4ALlbs6B3ZGkwAH3vJ5An49vDt6IU7TaKzrGdX3oe:W1Z5bXQ4s6B3ZFw+5A0I+1o
- TLSH T1A4D72357A9DAB3D8C4830548A68B13CB11D9E479C9FE86183FCF6C036530EAB994D673
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger