General
- Target bc99dc694b5341eaa3261e996f5c015b.zip
- Size 2.8MB
- Sample260812-gn77sszepb
- SHA256 572264171a9966bd05cf551af0e0d8aa490cb7d33d024845f37607f69f247555
- MD5 c03a22bcec2505feeb6c239ad179dbe7
- SHA1 67af97a23d445edfc462590dae5a8785bdf8151c
- SHA512 65f708d11ffe34b99d7ab2ec0482c8ee3a4d687bf012143cfed46aeacc0e4285920e1db37df80fe0f0296ce5b0e2d8a369a40e7c0702435c9fe4953f1d7107fd
- SSDEEP 49152:8yGXFJSZQ45wdhaACmYV+tLKZRvcFaQJAU4fgmkcZ28DiGLnIWOm:8yG3SvwLazIpIfgmk2DiG1Om
- TLSH T1A4D533CF26B6A1F250BDD28ACE45CB479C765774AE0D2C96564C82A8EDCF160DC88FD0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
build.exe
Resource
win11-20260513-en
16 signatures
600 seconds
Malware Config
Targets
-
- Target build.MALexe
- Size 804.4MB
- SHA256 2b8d92b5ac61885b561d6c6a8c4335447191e7d5f5fb56bb96c65db9c13303f3
- MD5 bc9500720694f3cde4b318c64c4cbc37
- SHA1 b65286d2565acf1f888c905743bf88e6921ba635
- SHA512 19d8b00f7f1b665788797d939e7bf6162eb7843f0ecd6a112d6b68259ba4498a516242cb91e52b8bf05525d5d4d9ae2cf8cf8b0a91b8b626f56f05f0b33c8d49
- SSDEEP 49152:yoHVmHat/2n9oeLgDkF+9tRoH0NM18wlX2NhAbcsqZTUaP6jc9:yGf489+18wlX2/ocsqZPX
- TLSH T1AD997B07BEA108F9C1AAE33589AB4212BB74BC4D4B3233D32E50AA782F727D15D75754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
ClickFix v8 — PowerShell stage: PSReadLine + .NET + RSA key in process memory
-
ClickFix v8 — SHA1 hash anchor 91A9773E7A0BA4700195CBFFFF935A24C674C3E0
-
Suspicious use of NtSetInformationThreadHideFromDebugger