General
- Target Begin.exe
- Size 6.6MB
- Sample260809-b2gzwayamb
- SHA256 2a4a64cc28e112489f959a0d34c2ea8d85f422da893419bfce45581052602c86
- MD5 ae5e031b872f4a18e2600d481f032227
- SHA1 d31ffa1787a163711fb8f031a08fda238abd1bfa
- SHA512 fa35ad73bdfb6d8169d127f5bb2114819b25f60487ab2b48f5937d6047973599f3bf7b4f451cdcfa2741da12a9b8cf35737e6af48f53e6c688988336dad760d3
- SSDEEP 196608:JGkK1QaQ2MbSxCA4OCbTdTwio1ZVmDytXeL:JGT1QaQ2soCAIbTJwN1ZYDyVw
- TLSH T1B16623BDB298226CC01AC834D533BC4AF271744E47B5E5EF73D6AAD06F2B4609635B06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Begin.exe
Resource
win11ltsc2024-20260709-en
20 signatures
900 seconds
Malware Config
Targets
-
- Target Begin.exe
- Size 6.6MB
- SHA256 2a4a64cc28e112489f959a0d34c2ea8d85f422da893419bfce45581052602c86
- MD5 ae5e031b872f4a18e2600d481f032227
- SHA1 d31ffa1787a163711fb8f031a08fda238abd1bfa
- SHA512 fa35ad73bdfb6d8169d127f5bb2114819b25f60487ab2b48f5937d6047973599f3bf7b4f451cdcfa2741da12a9b8cf35737e6af48f53e6c688988336dad760d3
- SSDEEP 196608:JGkK1QaQ2MbSxCA4OCbTdTwio1ZVmDytXeL:JGT1QaQ2soCAIbTJwN1ZYDyVw
- TLSH T1B16623BDB298226CC01AC834D533BC4AF271744E47B5E5EF73D6AAD06F2B4609635B06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Probable phishing domain
-
Suspicious use of NtSetInformationThreadHideFromDebugger