General
- Target XDR_ResponseApp_CollectFile_RM-20260813-00014_63ffb2a8-ee86-44fb-821c-64e576a0ebe4_20260813T084232Z.zip
- Size 987KB
- Sample260813-kygpdaek6t
- SHA256 7b3e0f7e6542a808160ee99d35089abda5219e68106a01bf194f224db66b2df4
- MD5 c8867380c14417c9a5da12c5d49923a4
- SHA1 da09e71c53a41e1dfc51b3361969ed41af65d79a
- SHA512 49b7aafc407cd81a85c42363453d349579878c69df316e295eaa99dc2ffc56bc7bf6e9e66ed783538a3dd8f21d05321d6fae80334c4326b316a57fc7e8876dfc
- SSDEEP 24576:CyBDqRb5mGLcIZ14sVjpwKmAaZ7G/mpgXGfj6bnIiDphsshRqgQ:7DqR0G714sVjpwKmlZ7GOaWfj6bnIiDy
- TLSH T13C2533471FE2F597F3096D9D3BADE7E4175258728C6AC9622C824ABD0548C7AF3031B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XDR_ResponseApp_CollectFile_RM-20260813-00014_63ffb2a8-ee86-44fb-821c-64e576a0ebe4_20260813T084232Z.zip
Resource
win10v2004-20260513-en
12 signatures
300 seconds
Behavioral task
behavioral2
Sample
XDR_ResponseApp_CollectFile_RM-20260813-00014_63ffb2a8-ee86-44fb-821c-64e576a0ebe4_20260813T084232Z.zip
Resource
win11ltsc2024-20260709-en
0 signatures
300 seconds
Malware Config
Targets
-
- Target XDR_ResponseApp_CollectFile_RM-20260813-00014_63ffb2a8-ee86-44fb-821c-64e576a0ebe4_20260813T084232Z.zip
- Size 987KB
- SHA256 7b3e0f7e6542a808160ee99d35089abda5219e68106a01bf194f224db66b2df4
- MD5 c8867380c14417c9a5da12c5d49923a4
- SHA1 da09e71c53a41e1dfc51b3361969ed41af65d79a
- SHA512 49b7aafc407cd81a85c42363453d349579878c69df316e295eaa99dc2ffc56bc7bf6e9e66ed783538a3dd8f21d05321d6fae80334c4326b316a57fc7e8876dfc
- SSDEEP 24576:CyBDqRb5mGLcIZ14sVjpwKmAaZ7G/mpgXGfj6bnIiDphsshRqgQ:7DqR0G714sVjpwKmlZ7GOaWfj6bnIiDy
- TLSH T13C2533471FE2F597F3096D9D3BADE7E4175258728C6AC9622C824ABD0548C7AF3031B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext