net8.0-windows-20260812T103835Z-1-001.zip
- SHA256 fa1167968fe71ea11cd9c86d2c55c9e41354947b8711d449ef57822cee6710c4
Overview
overview
3Static
static
3net8.0-win...01.zip
windows10-2004-x64
1net8.0-win...01.zip
windows11-ltsc_2024-x64
1net8.0-win...-5.jpg
windows10-2004-x64
1net8.0-win...-5.jpg
windows11-ltsc_2024-x64
1net8.0-win...ig.txt
windows10-2004-x64
1net8.0-win...ig.txt
windows11-ltsc_2024-x64
1net8.0-win...s.json
windows10-2004-x64
3net8.0-win...s.json
windows11-ltsc_2024-x64
3net8.0-win...w8.exe
windows10-2004-x64
1net8.0-win...w8.exe
windows11-ltsc_2024-x64
1net8.0-win...w8.exe
windows10-2004-x64
3net8.0-win...w8.exe
windows11-ltsc_2024-x64
1net8.0-win...w8.pdb
windows10-2004-x64
3net8.0-win...w8.pdb
windows11-ltsc_2024-x64
3net8.0-win...g.json
windows10-2004-x64
3net8.0-win...g.json
windows11-ltsc_2024-x64
3net8.0-win...go.png
windows10-2004-x64
1net8.0-win...go.png
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
net8.0-windows-20260812T103835Z-1-001.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
net8.0-windows-20260812T103835Z-1-001.zip
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
net8.0-windows/call-of-duty-modern-warfare-captain-price-smoking-uhdpaper.com-4K-5.jpg
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
net8.0-windows/call-of-duty-modern-warfare-captain-price-smoking-uhdpaper.com-4K-5.jpg
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
net8.0-windows/config.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
net8.0-windows/config.txt
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
net8.0-windows/launcher iw8.deps.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral8
Sample
net8.0-windows/launcher iw8.deps.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral9
Sample
net8.0-windows/launcher iw8.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
net8.0-windows/launcher iw8.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
net8.0-windows/launcher iw8.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
net8.0-windows/launcher iw8.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral13
Sample
net8.0-windows/launcher iw8.pdb
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral14
Sample
net8.0-windows/launcher iw8.pdb
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral15
Sample
net8.0-windows/launcher iw8.runtimeconfig.json
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral16
Sample
net8.0-windows/launcher iw8.runtimeconfig.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral17
Sample
net8.0-windows/logo.png
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral18
Sample
net8.0-windows/logo.png
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target net8.0-windows-20260812T103835Z-1-001.zip
- Size 514KB
- Sample260812-mp6cgseq31
- SHA256 fa1167968fe71ea11cd9c86d2c55c9e41354947b8711d449ef57822cee6710c4
- MD5 ec975d285e2a70bdd50e62df762134e4
- SHA1 25b201bbaef95b8ca8f7e367cc493019f167b487
- SHA512 54857db89273390692b96ad046c00e1ac25bafbf26a0b3307d8a2614e8902d21e111992d076ddf0d0c43b258933aa62ead8d87ceb8d94c847f79a811f4417e81
- SSDEEP 12288:8+NemRsqEcwPMiT72yPr0i/uEjwJToyLblV4L:8+riqLi/HD1uZ84V4L
- TLSH T199B4E00398059B83E42987F9BE030EAC1F053B5DE99239EF45679ECB7E142621C9E43D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/net8.0-windows/launcher iw8.dll unpack001/net8.0-windows/launcher iw8.exe
File Explorer
-
net8.0-windows-20260812T103835Z-1-001.zip.zip 514KB
-
net8.0-windows/call-of-duty-modern-warfare-captain-price-smoking-uhdpaper.com-4K-5.jpg.jpg 338KB
-
net8.0-windows/config.txt56B
-
net8.0-windows/launcher iw8.deps.json428B
-
net8.0-windows/launcher iw8.dll.exe 184KB
-
net8.0-windows/launcher iw8.exe.exe 221KB
-
net8.0-windows/launcher iw8.pdb16KB
-
net8.0-windows/launcher iw8.runtimeconfig.json443B
-
net8.0-windows/logo.png.png 18KB
net8.0-windows/call-of-duty-modern-warfare-captain-price-smoking-uhdpaper.com-4K-5.jpg
- SHA256 fe57f0e9a1264901fb6c554ff4cf55d2b726cdd54601bec08f26d627844e646e
- MD5 e0b90fd7e56bb9478bdff9644ab17f99
- SHA1 b8b515c2af5a87f91feb22d22b54550bdeae39a2
- SHA512 f3f45312abcc2df8f55d49e46fb1e5c27c53bd1239f65732fc98a69eb77a2512e309f99bdac8d022831629e8c0d9a2cbb7aab8a5f14e5240eebedd0e84ea825c
- SSDEEP 6144:UonfYpS3NuvJjEm3w5RP4Enu2B7mMi07PdpWM7YjiFbuEJo2rM6OWz:UAqEOwPQiT7GyPZ0iZuEXww
- TLSH T14974C0079C059B83A42983F8BE434EAC1F463B5DE98279FF45275ECB7E206611C9E02D
- MD5 SHA1 SHA512 SSDEEP TLSH
net8.0-windows/config.txt
- SHA256 3eb036b633e4c146b66878aaea0882ddc974911cf22bf789e3ef9f267ded5db7
- MD5 e530e62995cd8bce3a3ea721d4525b86
- SHA1 8852398e20ef3e789b5487eb49cfd724993b057b
- SHA512 dd8096e17ab923fdc81c4fe30771064e8e1e7b97df04f2615a56a498f271584c294c2db42b1e118f271f041dd258b736e4d1e1d5e98beb541ccd7477ef2ab8a1
- TLSH T13E9002221655C5500949F630B62D5C64949F04051B550469A228163574D69C91A101B9
- MD5 SHA1 SHA512 TLSH
net8.0-windows/launcher iw8.deps.json
- SHA256 1b0279e4625784a85cc5aeaefa93b30b39840d02ef23f70bb1bf10949a63efa6
- MD5 06efd553dffef964a66b3d9ea972cac4
- SHA1 f3647d6d69f5d6e56073d3f6ed03a4362d48933e
- SHA512 5aa6c3e51b9ef5f521596855989345cf9fc5793e0db5cb8cdec2a796e2850d5d8f8f2645f9d255308d7b2e337d37763dd6a08caa9ef8c079c02959054db126f8
- TLSH T177E0921DD1844CA700B163B5543A83A3F5325B631011281675BE851C0F7B85B7C11FB9
- MD5 SHA1 SHA512 TLSH
net8.0-windows/launcher iw8.dll
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 57c87f37d2cc5dfc15cbf941de6d3b68be6c8d73e4ecc81ac5e8868a8da2b700
- MD5 8d62ba0f9fb6866207f00db76bdfe279
- SHA1 119f843cb80f5aaa59ce6b11181f1d2d0182c2e8
- SHA512 70e0edb4054b7222172c4dfeba2f66b968efebf4d281a2c281cd90627453666b213c96101f00b7801bd7c61551ec1156998c134c532b658a9da06abe2e220808
- SSDEEP 1536:ytzk8Aj8vRr+/9jzZZjflm4miaK/bkYfFl9bvAAj8vRr+/9jzZZjflQ:ytzPM1nfUoxbkYfkM1nfi
- TLSH T151041996FE16AE16C82222BC0415CAF55F27CF515206E3926BF1EC2BF8474D35E612E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
119634
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\launcher iw8\launcher iw8\obj\Debug\net8.0-windows\launcher iw8.pdb
mscoree
_CorExeMain
Name
.text
Size
109KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
74KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
net8.0-windows/launcher iw8.exe
- IMPHASH bb3ac2c21e02c68abcad237dc3fa6d00
- SHA256 f06d92f2ff8fcb97ecf753e056d0ecba39f331c0d288a0887928dbeacf86e11d
- MD5 0b437cd512b5082774813afe4b6f2521
- SHA1 89032ef5cf6e1d5c55191dade80fdb07737282e5
- SHA512 9895ba2e7c52e5637a38e5aafb0d72cb92e763491c110b3e1d3e4fce1b74f21884de7f860982098b6b216ebead92a2cb17dd070cc828e7fa6d4f0f5d26493570
- SSDEEP 3072:VqvmgiYSoIk8uIHzlqRwa/EB26mFIgkM1nfM:V64k83TlEvSiIgkM1nf
- TLSH T10824E407EA6A65AAC462527C8811C8B1EB33BC454761E3CB17F09D77BE636C19E39343
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
72368
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
kernel32
FreeLibrary
LoadLibraryExW
OutputDebugStringW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
GetModuleHandleW
MultiByteToWideChar
GetFileAttributesExW
LoadLibraryA
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetWindowsDirectoryW
FindResourceW
GetLastError
ActivateActCtx
FindClose
CreateActCtxW
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_invoke_watson
__p___argc
_exit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_errno
_initialize_onexit_table
abort
_c_exit
_register_thread_local_exe_atexit_callback
terminate
__p___wargv
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
_set_fmode
fputwc
__p__commode
fputws
_wfsopen
fflush
__stdio_common_vfwprintf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf
setvbuf
api-ms-win-crt-heap-l1-1-0
calloc
_set_new_mode
free
_callnewh
malloc
api-ms-win-crt-string-l1-1-0
wcsncmp
toupper
strcmp
strlen
_wcsdup
wcsnlen
strcpy_s
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-time-l1-1-0
wcsftime
_gmtime64_s
_time64
api-ms-win-crt-locale-l1-1-0
___mb_cur_max_func
_configthreadlocale
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_lock_locales
setlocale
_unlock_locales
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
89KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
47KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
74KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=12, id=260, version=35207,
count=87, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33140,
count=204, id=1, productName=Unmarked objects,
count=10, id=265, version=35217,
count=1, id=258, version=35217,
net8.0-windows/launcher iw8.pdb
- SHA256 02e4ec04b33958c946eb3b5b577d64424de079222f6b7445a1cc9aad8ef393ea
- MD5 7e466a82473d06b9367138e3c843796d
- SHA1 4543348cd3334958110dd2b406bfc5c1c0aae1fd
- SHA512 4435fdfc6aea4dab632079a0457bda1905775c579a08da21dc71accfe2351d8b3583a765dfe7fe7b15c49c1a5cd3d009d7b2176096c0631754f5034f56b105b8
- SSDEEP 384:MhVsU678sqkkWaj38mvNg+iqaBGWyh7IFQivvZ/UHvfMGkjRTr3aN1ciCj35wb:ISrytfWyhcQY3pjJwb
- TLSH T1C772B473D798C921C6821A761976C79C773083202345EFB8F1D46E08EEBF79947B96A0
- MD5 SHA1 SHA512 SSDEEP TLSH
net8.0-windows/launcher iw8.runtimeconfig.json
- SHA256 7e79af92820e50910b90f1cade2728f45987393f24b50e384dc225d9773b7194
- MD5 9db099f143ead47e224653d0dde19fe9
- SHA1 d050db767fc64aa1705353132da3e35048475d3c
- SHA512 579c3c870903b3d47dbc2567153fa7c73e0aa47387c6969b8982037884033a4b25de702e0efb8c7ae717b6b463192b917b18a79b1ef5f8c969f257422af2b65f
- TLSH T1EEF0222ACA100DA308B977BEC626D182FE30436B00141966B5FC041C2FB3AA21100F89
- MD5 SHA1 SHA512 TLSH
net8.0-windows/logo.png
- SHA256 3791babbebf361e4cfb29f93bc48d4ab869b4cfddb0bf26add3883cad8a1883d
- MD5 f1bd3fec308d9c5bef047edf04819cbb
- SHA1 54b64eb411fd79103f5a139333e660391104e50d
- SHA512 558e56ee671cf4f88d204a86a50f74553c3a5050400ef09af86f47b381346c3ccdeb0d47fd5041cbb61b8b06407bee00ea16c96d49c28e94ce2701f25a0b22a1
- SSDEEP 384:M+dVB9k64zyma4A1vbmG7+Nq1h4Y1uaHM1dMn7WJb7WHoicBPWkYIR:MUBlXJ1R4pBkHHoJlYIR
- TLSH T1F282D1A3C5F18852CE1714775251774F92B2B2A23F3DA1D2D4DD1C06E21EBBB361AB05
- MD5 SHA1 SHA512 SSDEEP TLSH