General
- Target SquadSeed-2.1.1.zip
- Size 24KB
- Sample260807-phw7cafg56
- SHA256 66da25024f5b6416dcfa30ede91fd1f93bd880de1e48b816b851187ab6ffe519
- MD5 2798bf185e9ce1591b6f647faab77b77
- SHA1 c5f770ff7a18d434768c4d97c888eb71847f4ec1
- SHA512 c45f954d7f3629d64954e51316b685e38b7e147425c0ae27c45604446586350341ca3a945e7f2ee60b13bedde0c0e37901617fb06385a034efa3430ec8fd86fc
- SSDEEP 384:8BZJ1xWocBnGhW7DsMmX1sqN05zXLrqdy7cjGaQoG8iHX25yU8N+3okMMR:8BZs/GE7IqECfrCOcjGyGJ3CkND7MR
- TLSH T185B2E11CCB21361DF6FF30F07985CDCB648E41BD2D6883A10766E875880E969A18B7F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
SquadSeed-2.1.1/Check-SquadSeedPlayers.ps1
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
SquadSeed-2.1.1/Check-SquadSeedPlayers.ps1
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
SquadSeed-2.1.1/SquadSeed.cmd
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
SquadSeed-2.1.1/SquadSeed.cmd
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target SquadSeed-2.1.1/Check-SquadSeedPlayers.ps1
- Size 46KB
- SHA256 7e65494ef503f9ad559b1577b6eb9ad94242d016973a986104d4e3e78f46cce6
- MD5 42ad82cb8694bfb764af435296e568a3
- SHA1 42d7205d6daa6623946dedc395e42539066276d4
- SHA512 128ecf84a697c6687c92b64a09ae9d5694b9f2d69caf8e8542eb1887a21c199f0ed25fc04cd14577faa757f8346ac51fcbaaa4cd796e2355de00ea6a16a3aa94
- SSDEEP 768:f459G+RbDGZDnWqE1hMhF5vDVj7Z5cyYdQdaNtz7lH6f14fyVPT1NmKGmmNejIf:f2R/0Dv38dQdglH6f14fyto
- TLSH T1EB23952975AAD26957C72466C8CF90403E321137610CDD187DDEE2C8AFCE53CC6B96AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
- Target SquadSeed-2.1.1/SquadSeed.cmd
- Size 293B
- SHA256 eebd81b5b4eaacd363f36637d6e02226b6d93fe931a7fb66306a044acd4902d4
- MD5 7afab99243cba2ee221aab6bef52f87e
- SHA1 cb1396407c6f7385021abff04cc6775f96589351
- SHA512 c9b4d198cab9ff320cbb325e22a426ddb9f58e8cc75e94b47bed1b0da467cec4bcd80bdf8fe3ce7df4b35928ac00a4b82fceb29d0eee404c7eb46884154c45fd
- TLSH T17DE0C24294D9835C7AA7CC3574E261B86C2F91176300996230E0432D3A0E768C9E61C9
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.