General
- Target DemsV5.exe
- Size 50.2MB
- Sample260808-xbpgxssgjd
- SHA256 a447742406404031cfc8d976294b12246777897bc200a60f37691be687ea175d
- MD5 c96d9626c33a20f057e05c454feb1eb1
- SHA1 525826e60212c2d421c0796404b8ad522c7db5f4
- SHA512 e1d3d59355cfd9d1036e724bf61dd03081ed4a14046e1846dc874e324d4aea73ca092ed1eb223457a190ddb87de96b5cdcda52f58bb927b25ec78fee3c53e504
- SSDEEP 1572864:OXJVrvoAJ4pUguPNoXWRH7r8r6rSDq5mqAVNfS:kv54igONJHsr6memq
- TLSH T132B733E181A41161E5D3823D46638B25B1F5E87167334BFF43D493AA2E6B5A20C3E3ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
DemsV5.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
DemsV5.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
main.pyc
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
main.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target DemsV5.exe
- Size 50.2MB
- SHA256 a447742406404031cfc8d976294b12246777897bc200a60f37691be687ea175d
- MD5 c96d9626c33a20f057e05c454feb1eb1
- SHA1 525826e60212c2d421c0796404b8ad522c7db5f4
- SHA512 e1d3d59355cfd9d1036e724bf61dd03081ed4a14046e1846dc874e324d4aea73ca092ed1eb223457a190ddb87de96b5cdcda52f58bb927b25ec78fee3c53e504
- SSDEEP 1572864:OXJVrvoAJ4pUguPNoXWRH7r8r6rSDq5mqAVNfS:kv54igONJHsr6memq
- TLSH T132B733E181A41161E5D3823D46638B25B1F5E87167334BFF43D493AA2E6B5A20C3E3ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target main.pyc
- Size 1.6MB
- SHA256 2f533dbacf9e28dcd2ffa795f902e350916972a7b7a2ffe6f3bf8409920a1517
- MD5 9408dfb89ab1d6113cf6942e3961cc59
- SHA1 e4ebfc1684fccba95365d68f76b1b0f98ce4c43f
- SHA512 7438afb27feadadd026e852c32b5925a5c836e18ae6ede4bf3b229f42005f9520e0b8348ed5423f6a3d25c77d38fe546116251a82aa40e4b4de5142f821b81f2
- SSDEEP 24576:eiVn3Q+rGiiVn3Q+rGfiVn3Q+rGnbkiVn3Q+rGx:DQlQUQLQz
- TLSH T148751230F250783FE199617E73E6AB4537364086B6279246F4AC50B87FE6A83CA3D54C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10