General
- Target 41d87bfa56a9078f774006e241b1cb66c966478575fef6e9957c579b57bc8b05.zip
- Size 3.8MB
- Sample260809-t2n3asvtex
- SHA256 4ab93529202e7b96f6fccbcefdb3d5b64970fd7b9350fdd2388e040ee52dd001
- MD5 318747d8c86517d6f1b87e352e30a8a6
- SHA1 8b92c41518e0654f3d83019f1063f9e4480e31e0
- SHA512 67c1f8a5eb62b4f4df64e0f698db2d50c68101ff02b246a2d89ad0936d850c49fdee4e54de20c090713a80dd8a6c7cfb6dc61625f2d4b2d3849ce185db5c5182
- SSDEEP 49152:haH4AfnZ/Po0kE1+fHHG1v+oCJjizVB7EIQsGdz9bMtljs2dDF5M1bIkmsMztlVF:e4qn9L1d11CS/Q8ihilmskBEtlVln80p
- TLSH T1E916338C533709E8878C7A2F74F314D2B54D1DFFA7B836AA1ADE1C5C9D669200A458CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
41d87bfa56a9078f774006e241b1cb66c966478575fef6e9957c579b57bc8b05.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
41d87bfa56a9078f774006e241b1cb66c966478575fef6e9957c579b57bc8b05.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 41d87bfa56a9078f774006e241b1cb66c966478575fef6e9957c579b57bc8b05
- Size 8.8MB
- SHA256 41d87bfa56a9078f774006e241b1cb66c966478575fef6e9957c579b57bc8b05
- MD5 1e8d9349c2b3f02eebf8fbd8dffddc95
- SHA1 c8629aab4a366b165778b84b13fdf9d15fb67157
- SHA512 67b9bb34c4a337c11ceeb6c6f668ba90dc7ab30ddf76fc1cfe481f2b1a5368d5b03260743e13677a77600bb5b8f4231b59f7cc0082256f16f22cfb7adeed0883
- SSDEEP 98304:aBPaXEE8abgbf8mhIYeo9eTxdEm7WhcJQr:aoXx8Mgb0NpedSQr
- TLSH T136965C07E8A155E8C4AED1308A669253BB717C485B3137E72B90F7382F72BD06EB9750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects OreshkiStealer payload
-
Family: OreshkiStealer
OreshkiStealer is a stealer and trojan written in Golang.
-
Detect suspicious telegram bot
Detect suspicious telegram bot.