General
- Target VeryFun.exe
- Size 3.5MB
- Sample260808-k91avstfmh
- SHA256 0336cdefa03bb62a23352030b4bce50dc89edc802410cf544a6cc700be44ae1f
- MD5 54ae87578db60f7c2307c2454434eb2d
- SHA1 d1c15c52228b098afdef2f90e76636415afe7951
- SHA512 f61baf16467180a994c9ea83e318d666d06be9d42b5cc55fbfdd710c5c54d9f5e22bae62a73bef90af70dbc1c098e4a3bcd338bb7f6e6f0edeb7cbc61b2b4a3b
- SSDEEP 98304:f8sjPes/4ibecELz/RkO6LF4hRq5GKHmBBY:RjWsQWsaHyRN3z
- TLSH T14606122273DDC371CB6A9173BF6977142E7FB8250630B95B2F881D79AD10121262DBA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
VeryFun.exe
Resource
win10ltsc2021-20260513-en
12 signatures
30 seconds
Malware Config
Targets
-
- Target VeryFun.exe
- Size 3.5MB
- SHA256 0336cdefa03bb62a23352030b4bce50dc89edc802410cf544a6cc700be44ae1f
- MD5 54ae87578db60f7c2307c2454434eb2d
- SHA1 d1c15c52228b098afdef2f90e76636415afe7951
- SHA512 f61baf16467180a994c9ea83e318d666d06be9d42b5cc55fbfdd710c5c54d9f5e22bae62a73bef90af70dbc1c098e4a3bcd338bb7f6e6f0edeb7cbc61b2b4a3b
- SSDEEP 98304:f8sjPes/4ibecELz/RkO6LF4hRq5GKHmBBY:RjWsQWsaHyRN3z
- TLSH T14606122273DDC371CB6A9173BF6977142E7FB8250630B95B2F881D79AD10121262DBA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of SetThreadContext