General
- Target test.zip
- Size 3.9MB
- Sample260809-tj19xahp41
- SHA256 82d2002c641ed9e9cd43641a3abc34df4c9cd6a683cc2e6fb03a840c5d96cd3e
- MD5 10c2dc89f548bac1fdd846aab2ea2fc8
- SHA1 dc5982cd91426244d2e1b16635604b5ec85290bd
- SHA512 a9a13e80a0c1368f006262a0dfbf28feed8cc6b9bcf2172c8c74b2e95a610084cb36d926f583d5cffeeb984a888478d44641c9b9fb05f10527436740fe047514
- SSDEEP 98304:/bQewLqfEm7nt1FRG9Nzc9Zy0kzP4gRAbQnGFj3dD9RRJ:D9wWMm7nS3oyFzwgR63dDDRJ
- TLSH T1AA1633A60B8FFC40934AD05D90E6AED455B547EBA03D908FE43D88B93B876C0847F967
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
test/osu!install.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
test/osu!install.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Behavioral task
behavioral3
Sample
test/osussist-12-01-2025.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
test/osussist-12-01-2025.zip
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target test/osu!install.exe
- Size 4.3MB
- SHA256 6e182c10d1813209d12753dbc70b3a5bba00fef4ecf64bc42051870e6dfe4b7d
- MD5 0beb5a2f026f5a579c2046ab73fece16
- SHA1 4e0cccd7363ac0a4d388762196f641aff60daf75
- SHA512 5577edf7bb9f8b2f476d531bd79ca849798d3506eed97519184748724fb62cba33ece1d642e5395b5be673c39df5faffdb5b9cd86ebab2dfdd2cc8c0ae0eb4a8
- SSDEEP 49152:x9xlmFoipLLyxBRoEMKBFWuscdxBEDAklsA+xyQRqZdxRxpDOh8:x9x1ilLyxBRlMFud4c0xRxpDOh8
- TLSH T1C0266B48B7A84E3FC45FC7B260A51D5267FAEC59B3D7ABCF5510B6B429B6304280324B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Drops desktop.ini file(s)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target test/osussist-12-01-2025.zip
- Size 1.7MB
- SHA256 8c35bd8bedc6078c2fed2d96e948291a09c41decf7fdc06c8717abeeec4b7a98
- MD5 1d138e5d0098cc5aa7d47fbb014cdec3
- SHA1 6aa5651c96308204c94cb767f1100e7e8041a147
- SHA512 cbe67d849c8f61607f00d6bc3a114e53e53b538312b2f5b416bd41a295bfd54ffc19beee2742c6ff8413c5638b77ccc916b6736110f84fe305c91956ff7d067e
- SSDEEP 24576:2ex92mSQD4kpIn9pNF7C/APhbXXKShLq2PDfINKT5gETPm+wBRPXaRR5:bxAbQnIn9lqQ2ShO20YdTTPm+OXaRR5
- TLSH T12C8533AB064AEC12634AC84DD4DEBEE90CF357F7A23E858BE5381DE67A44590043E467
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Virtualization/Sandbox Evasion
1