General
- Target loader (2).exe
- Size 18.7MB
- Sample260812-a5nfdshf96
- SHA256 770b466ce91a276e2df905322dcf10a6ac4d2e4cab2ee840bb7b761ee95a54bb
- MD5 c34569c5a9c6502461983b28a068f660
- SHA1 ac02d77c2caddbae9a0a8a135e4c7bba7e1178fc
- SHA512 af94f630503213936474b5578fbbc93b5e0748e1fa5629568168f456c27fff3bc63d9ef0acb3427da4fe21c19252e7b161bb3df5025b5ccad701bc61aed43603
- SSDEEP 393216:4biodjs14bMgLc9zGdo0PK6DgIfUKOcFXEAphVtnIwQSg+LNxOuvZgtV:t2G4TLcNOBFD58KPFRphDBo+LNxXvZg
- TLSH T10A1733E4AB925DB1F4BB843CD95286122073E9B45BD091DF276C86292C373C209FD67B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
loader (2).exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
loader (2).exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
script.pyc
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
script.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target loader (2).exe
- Size 18.7MB
- SHA256 770b466ce91a276e2df905322dcf10a6ac4d2e4cab2ee840bb7b761ee95a54bb
- MD5 c34569c5a9c6502461983b28a068f660
- SHA1 ac02d77c2caddbae9a0a8a135e4c7bba7e1178fc
- SHA512 af94f630503213936474b5578fbbc93b5e0748e1fa5629568168f456c27fff3bc63d9ef0acb3427da4fe21c19252e7b161bb3df5025b5ccad701bc61aed43603
- SSDEEP 393216:4biodjs14bMgLc9zGdo0PK6DgIfUKOcFXEAphVtnIwQSg+LNxOuvZgtV:t2G4TLcNOBFD58KPFRphDBo+LNxXvZg
- TLSH T10A1733E4AB925DB1F4BB843CD95286122073E9B45BD091DF276C86292C373C209FD67B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Loads dropped DLL
-
Adds Run key to start application
-
- Target script.pyc
- Size 44KB
- SHA256 6426264d4c253f8bc84c2b43a9ca4c635eea60e4568aee0e626ce957260e85b6
- MD5 f730fcb4700e503a1f9f4f71e8ded6de
- SHA1 3da52367b5e3fc4d1ae5c7793c745bebc980baf4
- SHA512 ba0b02db5be1f435a5ca9293bebe00bf4559a47daa9cc33aa2cf6189e3874a2904a851e2dd16714461c2ccbc9789dcd5d74894cb85442f5cfaff88298e3eee1e
- SSDEEP 384:spXlEpAbvMbjQJ98k1wnjVHu+xxcrYDAOLKxv8zgna5uQQse4mh0HXYCNLPgt6Vm:szbvpHyPcEcOMvrnuBR5TXY6jgX
- TLSH T1B613C7B558747423F984FD3D21F3AC88A3729602E641D907F41C9DF8AFAA616CE6032D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1