General
- Target demon.x64 (1).exe
- Size 100KB
- Sample260808-a8nkkawgre
- SHA256 8bf5bcbe5f13bbdbc49b5068a61dfc6faf84de74e92d3faf9cba072f69895ac7
- MD5 8a58fc30675ea51dfd298926e6af883d
- SHA1 792795659b4ce9fd79dda2ff2725a4c493f4630a
- SHA512 a60f12588821f38bf3d56de935da5febd562ed4ee2292a5ba2f13d7750e281b2f35891dbc2ccb3c0434680c43d86af0c4cde45e8f17a80c02af507841094bc3f
- SSDEEP 1536:akHZalOYktfCM83vcAxfdVE/kGE5+Kb+LwoMSJZNS5FOCdb:n8ITtfCMJ6VE/kOXMSJZgPOCdb
- TLSH T1D6A39503E2A720FEC4A9C1B447CF7232FAB3B45C21346A0E5710CB652F62AB1767D659
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
demon.x64 (1).exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
demon.x64 (1).exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
havoc
Attributes
-
spawn
C:\Windows\System32\notepad.exe
C:\Windows\SysWOW64\notepad.exe
-
user_agent
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36
Targets
-
- Target demon.x64 (1).exe
- Size 100KB
- SHA256 8bf5bcbe5f13bbdbc49b5068a61dfc6faf84de74e92d3faf9cba072f69895ac7
- MD5 8a58fc30675ea51dfd298926e6af883d
- SHA1 792795659b4ce9fd79dda2ff2725a4c493f4630a
- SHA512 a60f12588821f38bf3d56de935da5febd562ed4ee2292a5ba2f13d7750e281b2f35891dbc2ccb3c0434680c43d86af0c4cde45e8f17a80c02af507841094bc3f
- SSDEEP 1536:akHZalOYktfCM83vcAxfdVE/kGE5+Kb+LwoMSJZNS5FOCdb:n8ITtfCMJ6VE/kOXMSJZgPOCdb
- TLSH T1D6A39503E2A720FEC4A9C1B447CF7232FAB3B45C21346A0E5710CB652F62AB1767D659
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10