General
- Target VeryFun.exe
- Size 3.0MB
- Sample260809-azz71axdkc
- SHA256 8b04fda4bee1806587657da6c6147d3e949aa7d11be1eefb8cd6ef0dba76d387
- MD5 ef7b3c31bc127e64627edd8b89b2ae54
- SHA1 310d606ec2f130013cc9d2f38a9cc13a2a34794a
- SHA512 a11eadf40024faeb2cc111b8feee1b855701b3b3f3c828d2da0ae93880897c70c15a0ee3aeb91874e5829b1100e0abafec020e0bf1e82f2b8235e9cc3d289be5
- SSDEEP 49152:wshda+bFz6dmTTfO0JBhybeUXzELz/RkxI6Zxkxur4E5IReTD5GKHmDVJPY8:Js/4ibecELz/RkO6LF4hRq5GKHmBBY
- TLSH T19CE533E5A5769077EA8DA3F885D009F80D37F8266FA427451387FB17BC20A12DA0397D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
VeryFun.exe
Resource
win10ltsc2021-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target VeryFun.exe
- Size 3.0MB
- SHA256 8b04fda4bee1806587657da6c6147d3e949aa7d11be1eefb8cd6ef0dba76d387
- MD5 ef7b3c31bc127e64627edd8b89b2ae54
- SHA1 310d606ec2f130013cc9d2f38a9cc13a2a34794a
- SHA512 a11eadf40024faeb2cc111b8feee1b855701b3b3f3c828d2da0ae93880897c70c15a0ee3aeb91874e5829b1100e0abafec020e0bf1e82f2b8235e9cc3d289be5
- SSDEEP 49152:wshda+bFz6dmTTfO0JBhybeUXzELz/RkxI6Zxkxur4E5IReTD5GKHmDVJPY8:Js/4ibecELz/RkO6LF4hRq5GKHmBBY
- TLSH T19CE533E5A5769077EA8DA3F885D009F80D37F8266FA427451387FB17BC20A12DA0397D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of SetThreadContext