General
- Target Xfer.Records.Serum.MERRY.CHRISTMAS.&.HAPPY.NEW.YEAR.v1.368-TCD.exe
- Size 194.4MB
- Sample260809-tlpnwstzf1
- SHA256 7a12beeade43961eb5649dd8118dfb7025767aeab9fcd6418071679247beaebb
- MD5 381273258ecb7c0def938463aee39ee5
- SHA1 9c1b9ec009b13e1cf010f1c3a02ea216348b08d1
- SHA512 559e9557b07222ec9e5f3ddb7df557b587178ad969e0e4728cf574bd9357e60f73a856f7dcd965f811ede6548b5fd6ed2b8b1141f994e422c7c7e2d8d8e223c2
- SSDEEP 3145728:QFouHlx5rcWFlzaNTX8UXQlTQtziAZtRpbtviMgr70+GgbPOHOHMNP2X0CoG:QxHP5rhmNBl1ZtReMgU+NOHOsNE0CoG
- TLSH T1BCA8335BB678703ECD79A33110614704A6BFBBA1B3798C3713D08588DB2B4625E7EE85
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Xfer.Records.Serum.MERRY.CHRISTMAS.&.HAPPY.NEW.YEAR.v1.368-TCD.exe
Resource
win11-20260513-en
12 signatures
900 seconds
Malware Config
Targets
-
- Target Xfer.Records.Serum.MERRY.CHRISTMAS.&.HAPPY.NEW.YEAR.v1.368-TCD.exe
- Size 194.4MB
- SHA256 7a12beeade43961eb5649dd8118dfb7025767aeab9fcd6418071679247beaebb
- MD5 381273258ecb7c0def938463aee39ee5
- SHA1 9c1b9ec009b13e1cf010f1c3a02ea216348b08d1
- SHA512 559e9557b07222ec9e5f3ddb7df557b587178ad969e0e4728cf574bd9357e60f73a856f7dcd965f811ede6548b5fd6ed2b8b1141f994e422c7c7e2d8d8e223c2
- SSDEEP 3145728:QFouHlx5rcWFlzaNTX8UXQlTQtziAZtRpbtviMgr70+GgbPOHOHMNP2X0CoG:QxHP5rhmNBl1ZtReMgU+NOHOsNE0CoG
- TLSH T1BCA8335BB678703ECD79A33110614704A6BFBBA1B3798C3713D08588DB2B4625E7EE85
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.