General
- Target D.7z
- Size 367KB
- Sample260810-p3r35ayfng
- SHA256 f53b8fd71824672dcaa9480dc87fd8dcc3a43ac9c5ad000e5098960033edc0be
- MD5 910ff369409e9b2944afeda2d85a18a6
- SHA1 f51cab318fd740c5f35a84d5caf4627c9c59c661
- SHA512 8af84118b58df2ef6f8729b98397c2846bbf671e31c7d02cd54f0f37ca02f0ff26f0794ed9c3642be1bc315bf7b897eb6ea3a7f74b3c4a9b1ab1927592f6c761
- SSDEEP 6144:SP+lwSVZcylDn/QcrQcInnBWYWZ3WVanmodemzVOqYDvVGrZuvk:SOwSVZcErYcc/mZmVXnmxIGP
- TLSH T18384230B2379C8E47F5CC4BE7914D1011128CADAE7799F37A94C263BFADBFA0A660151
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
bewtlfmlzhutxmgobvwa.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
bewtlfmlzhutxmgobvwa.dll
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
start.bat
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
start.bat
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target bewtlfmlzhutxmgobvwa.dll.bin
- Size 1.2MB
- SHA256 f11057ab58bef936d98ba189829c64260a6a540cdaa046f93613138e820c98c6
- MD5 5ef7bf4ed52be2a6d5ebbcf3076fba5f
- SHA1 9e03e983e26d4782a3fef0a6ebb47fdcd46974c9
- SHA512 66d80b3505d3fce7f4b4f238affb000423b429ee75aa5cd757e0fb810d31d54e593a58bc019de7abc440ae9d4fbc60ca33f33a85ed9a4783e721e844dd263a37
- SSDEEP 12288:bLL0VMmPPvq6NXRTp7A2jsb3yDbe7qDu6ZPIFqYUrIcOR5XQRd+V2z3hrAduEYR+:3KNPPTXRTK2+GmFMIcqQqVg3hrrFHRO
- TLSH T1A9459F16739802B9E17BE17DC9974A46E6B278054330E7CF03E496AA2F277E14A7F311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target start.bat
- Size 101B
- SHA256 1db3cae91d94a7d053ef12cf97cc3d5db2b88de49c9807ca61fdd038ad02d5d7
- MD5 e9687f1e6b2971c5856b2cc778098cdc
- SHA1 7fd35740c87dc2844b6e003f50a023e6707b1fde
- SHA512 db8ea8b5ef210cdd41725a9158f4611960ed5ddc947f90067df178d838e7d15a6bdde207bc95175ca10f0462be8f11713d4c01cdc168c5172d25836264eeb1e9
- TLSH T1A7B0920C2EAA100AE692381A0308852FB68E728E22B0E2808268E2E3123A0CD8000390
- MD5 SHA1 SHA512 TLSH
Score7/10-
Loads dropped DLL