General
- Target balloons.exe
- Size 2.6MB
- Sample260808-pgp2msdd77
- SHA256 e27eb6e7166c3e9996b44f606e173f2e154ac30c93b47a50f7ec27f7e82adf50
- MD5 eb00f61fa87c0a29d509a236afebca6e
- SHA1 856a4fa4ce5bab77d89358cc41886e73a3f408e1
- SHA512 b656a938c45bb562a64bc6799512b11829648ca949ed89072cad26269f1e2ab6fb87eff04255495115139161cb09b92efdcafc9316b13134bc103284652f9590
- SSDEEP 49152:KuI2hoWTnl0brTnKGe8orUIfWPF8pvNCQAfbd:K5Oh2bXnIUIud8VEZbd
- TLSH T1A3C5F13FB28B653EE06E5A3A7A72E110983B766165174C0696F4C88CCF250B11E3F797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
balloons.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target balloons.exe
- Size 2.6MB
- SHA256 e27eb6e7166c3e9996b44f606e173f2e154ac30c93b47a50f7ec27f7e82adf50
- MD5 eb00f61fa87c0a29d509a236afebca6e
- SHA1 856a4fa4ce5bab77d89358cc41886e73a3f408e1
- SHA512 b656a938c45bb562a64bc6799512b11829648ca949ed89072cad26269f1e2ab6fb87eff04255495115139161cb09b92efdcafc9316b13134bc103284652f9590
- SSDEEP 49152:KuI2hoWTnl0brTnKGe8orUIfWPF8pvNCQAfbd:K5Oh2bXnIUIud8VEZbd
- TLSH T1A3C5F13FB28B653EE06E5A3A7A72E110983B766165174C0696F4C88CCF250B11E3F797
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.