General
- Target a22e3c3ddd69106e76b5dc0d739a054fb82b9c7b5cdc961e3111722368ed73bc
- Size 14.9MB
- Sample260814-aaa7ks1cnc
- SHA256 a22e3c3ddd69106e76b5dc0d739a054fb82b9c7b5cdc961e3111722368ed73bc
- MD5 5ceccea9e3050639dd8dc5334785d720
- SHA1 d2186b89982cdc58078b30672e565e794519d2a9
- SHA512 dfc68cb79ff579f472e03cdc31a16bcca408540402e77b0c81ac35008ffe13e28625454388dd22b32aa0c37072a39318242b3955a56db971af8a77c7ac4b7d1a
- SSDEEP 393216:/tD0q5PEamWwtwckdZ2/rtxdOWBD20oRwdNeTGgm:55cjWnx2tyW4RyEc
- TLSH T107F63327C5E929FF349FB7FDAD3D26A0D029BE78A53716449E2204206037D57A82319F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Castle.Core.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Castle.Core.dll
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Installer.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
Installer.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Castle.Core.dll
- Size 14.0MB
- SHA256 a7a153028d5dc6adb55162c312d356fa5817e68c0b0106dce8c61cd587df2986
- MD5 08451924a83c85da675c58b775eb6f8e
- SHA1 389ee10cf440b98936628e40c7767e2aa6606b42
- SHA512 0dd2dc5ef8c3e06c5c886d8454e05b7c977f2faa336278b11028de8772346db73dcd7a9cc9c94de1110d87ad95e68ce72bd1a5b65845f0880a0547c872fd6a2f
- SSDEEP 393216:NSyxX3p34/ZleLGtJg/69mfGujwoeOAz2V+Gp0UL4s3H5W3iVGL:p4/Oi1CHk/GpbL4eK
- TLSH T14BE6BD0FB6E23465E556DEE79C5277F4092FA2A7EB03034B162C63B5D8A12ED0E44327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Installer.exe
- Size 246KB
- SHA256 3d2b22b6bc51e0918263f4420e6bdf7d982d961b54176c470cac11841d1c9b33
- MD5 2d6ebd59b568586a8f1683b07de897e1
- SHA1 ca4af6cd9ebdcf9d29481be1a1229697cb56d54c
- SHA512 67d24d8b5bda715c6bc6c77d2dfa193d6bfca7480c2b46750d9e5b5171de5341fa64e0b02d797eca3839d1bd646d84f002ac654c8f5c0040469e8feb5d6c46d6
- SSDEEP 3072:6DEKKwBWmSEoRoocfZO8gQYiY35ePw2XpFU4rwOe1ZbZEFf02RFiZWr5MAh6i:UHK2W0u1EO80+RXf1102bio62j
- TLSH T17E345901A7EC0615F6FF0AB8B8B055158B76F867E866D75E388C61AC1F73740EA60363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger