Overview
overview
8Static
static
7ConfigureDefender.exe
windows10-2004-x64
8ConfigureDefender.exe
windows11-ltsc_2024-x64
8$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...om.dll
windows10-2004-x64
5$PLUGINSDI...om.dll
windows11-ltsc_2024-x64
5$_0_/Confi...64.exe
windows10-2004-x64
1$_0_/Confi...64.exe
windows11-ltsc_2024-x64
1$_0_/Confi...86.exe
windows10-2004-x64
3$_0_/Confi...86.exe
windows11-ltsc_2024-x64
3General
- Target ConfigureDefender.exe
- Size 2.3MB
- Sample260811-25myea1sft
- SHA256 bd7630b6ad94f8ed2024e5e98a24b6fedbb5f2b8a058b70c8ffeefe98a7dcca2
- MD5 93ed561c7535cd3dfa495d3201bf64e4
- SHA1 63cf61756387c46d018d32887b5ebb8364890d9c
- SHA512 5628cc322fceebc22c56d9e3c5087e14e50e187b619c42b6533ba3168c5d1a432822b686fc9bd83755d9644a254f4b4bf602fd97f08e09c9781c054187f363bf
- SSDEEP 49152:YTkeg6AYuqEU5vGUjO5HR96kTAiIqaC5j8s:YTkegfYPEUNn+R9+i9aCx5
- TLSH T110B523A3BB0010A5EC061AF1E9B5F876496AED7E072C41734A41F7E1A2F53871E6C6CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ConfigureDefender.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ConfigureDefender.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsRandom.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsRandom.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$_0_/ConfigureDefender_x64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$_0_/ConfigureDefender_x64.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$_0_/ConfigureDefender_x86.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$_0_/ConfigureDefender_x86.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target ConfigureDefender.exe
- Size 2.3MB
- SHA256 bd7630b6ad94f8ed2024e5e98a24b6fedbb5f2b8a058b70c8ffeefe98a7dcca2
- MD5 93ed561c7535cd3dfa495d3201bf64e4
- SHA1 63cf61756387c46d018d32887b5ebb8364890d9c
- SHA512 5628cc322fceebc22c56d9e3c5087e14e50e187b619c42b6533ba3168c5d1a432822b686fc9bd83755d9644a254f4b4bf602fd97f08e09c9781c054187f363bf
- SSDEEP 49152:YTkeg6AYuqEU5vGUjO5HR96kTAiIqaC5j8s:YTkegfYPEUNn+R9+i9aCx5
- TLSH T110B523A3BB0010A5EC061AF1E9B5F876496AED7E072C41734A41F7E1A2F53871E6C6CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- TLSH T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsRandom.dll
- Size 21KB
- SHA256 db267d9920395b4badc48de04df99dfd21d579480d103cae0f48e6578197ff73
- MD5 ab467b8dfaa660a0f0e5b26e28af5735
- SHA1 596abd2c31eaff3479edf2069db1c155b59ce74d
- SHA512 7d002dc203997b8a4d8ec20c92cd82848e29d746414f4a61265c76d4afb12c05bce826fc63f4d2bd3d527f38506c391855767d864c37584df11b5db9ca008301
- SSDEEP 384:LCHDPMs4GdtyO5roguusMxUXiO3wOw95euooP2UgKbd9BvNtf:LCHD6Gh87MKXil/5r2U3z
- TLSH T1A3A2E1AFFA7A8B72C21162394365DDF861D08DDD01EE1E479A2EC226ACBD0400D7221B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target $_0_/ConfigureDefender_x64.exe
- Size 1.8MB
- SHA256 4d73fbd57fa5552872810647ace636e099a0daa420e99e57d0864bb53fd12422
- MD5 8bad053ed271dcbd24392c5b643833e3
- SHA1 3ea2df8565542ac0d407b6a5596362a4a20e8c69
- SHA512 810d251bbf6ec6ffe512f2b9bd2a633ca6458e4f15a6118d457f1fe3b65971f8379ec27af76012bc49723d07b2f156f79045b867c2199ea722029d1a5ac1138e
- SSDEEP 24576:VfTkD0E003ubc2MRgCmP/ZwIDzq+Iha5a0HM+A0A8m3qWLPY5yP+UzxByrWHTo:RG00SSgCmP/ZwYj48a0s+A0mqWU536
- TLSH T11C858D5523AC0394DA66E072EA52C636DA62FC8A0734BA3B0D90F6751F732631E1D3DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target $_0_/ConfigureDefender_x86.exe
- Size 1.7MB
- SHA256 b2a907b2eef41c95bd9105057b7f1f02206d3461f109215fca42d62d3c203c46
- MD5 081c41664fde6589c66acb67793fd584
- SHA1 609bc0c59f2f919dea43a5386f8095ae3c8f4a4e
- SHA512 fba3158f870b5e8854e854c2974f99b089b6909461391a8d7748173da12a96790f1e77a2edabc6ba90b25a135f762dcf0a660ac8fee4f490e9b54a632e380603
- SSDEEP 24576:FCdxte/80jYLT3U1jfsWa0+A0A8m3qWLPY5yP+UzxByrWHTo6Q:Mw80cTsjkWa0+A0mqWU536Q
- TLSH T15185BE22639D8360CA665172FA59F7312E6BFC250720B4771E84FD78A9701631E2C6EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10