General
- Target EU EMULATOR_patched.exe
- Size 63.7MB
- Sample260808-yzsd6atfqf
- SHA256 9250c648bc333dd69118726cb2ab518a4c07a374ed6d83619befd6e95cde5e91
- MD5 02e64cbe304bc805fc0518ac3b2b6bb4
- SHA1 c4a4a744e9f84828728d60f2e4bfd868f0a594bd
- SHA512 358a62bcf3cdd5464378bc96a3ffd56bb70240d8a34e50a42dbf3553f146a51c411f7109eed8620b4349fdf47222e5fa515525a0f82b9bef8f9a129b853fba5a
- SSDEEP 786432:lRxfiVicwZFe07z4Lv0XMiJdpHjVkacPrA:lRxfiViLZFekzIv0XMiJdpHhk
- TLSH T1A0E7724C24500AE9915BE815EAA7CF1B5FE9D6EB4BE8244DBCA88E344CD3CB71D1074B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
EU EMULATOR_patched.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
EU EMULATOR_patched.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target EU EMULATOR_patched.exe
- Size 63.7MB
- SHA256 9250c648bc333dd69118726cb2ab518a4c07a374ed6d83619befd6e95cde5e91
- MD5 02e64cbe304bc805fc0518ac3b2b6bb4
- SHA1 c4a4a744e9f84828728d60f2e4bfd868f0a594bd
- SHA512 358a62bcf3cdd5464378bc96a3ffd56bb70240d8a34e50a42dbf3553f146a51c411f7109eed8620b4349fdf47222e5fa515525a0f82b9bef8f9a129b853fba5a
- SSDEEP 786432:lRxfiVicwZFe07z4Lv0XMiJdpHjVkacPrA:lRxfiViLZFekzIv0XMiJdpHhk
- TLSH T1A0E7724C24500AE9915BE815EAA7CF1B5FE9D6EB4BE8244DBCA88E344CD3CB71D1074B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger