General
- Target Install37371o040.zip
- Size 15.7MB
- Sample260814-pr4b1sbm31
- SHA256 6fd67dcdaeced3ab38c6686a5c357172f1a02e14df6506d81e985bed62995adb
- MD5 db26441f25df881b0491e9ebd8f7a772
- SHA1 e61257a9d5239c3b85525bd7d259e8452e830092
- SHA512 08c0312c02ac1e72836c1b6273580d78f2ae9f8e73f4d7e265c2833da2931f100ad591085296495155743a6e9ef4e82a70939ae5e87fb27267ffc75c86ee96a2
- SSDEEP 393216:/tD0q5PEamWwtwckdZ2/rtxdOWBDFHgsqCZ2FO:55cjWnx2tyW3HgsqCZH
- TLSH T1B0F6331AE2E8046B38EFBBA9DD2E5FE4507C519C9F1B19AC5F720C341021C659EB31DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Installer.exe
Resource
win10v2004-20260513-en
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
Installer.exe
Resource
win10ltsc2021-20260513-en
2 signatures
300 seconds
Behavioral task
behavioral3
Sample
Installer.exe
Resource
win11-20260513-en
3 signatures
300 seconds
Behavioral task
behavioral4
Sample
Installer.exe
Resource
win11ltsc2024-20260709-en
3 signatures
300 seconds
Malware Config
Targets
-
- Target Installer.exe
- Size 246KB
- SHA256 3d2b22b6bc51e0918263f4420e6bdf7d982d961b54176c470cac11841d1c9b33
- MD5 2d6ebd59b568586a8f1683b07de897e1
- SHA1 ca4af6cd9ebdcf9d29481be1a1229697cb56d54c
- SHA512 67d24d8b5bda715c6bc6c77d2dfa193d6bfca7480c2b46750d9e5b5171de5341fa64e0b02d797eca3839d1bd646d84f002ac654c8f5c0040469e8feb5d6c46d6
- SSDEEP 3072:6DEKKwBWmSEoRoocfZO8gQYiY35ePw2XpFU4rwOe1ZbZEFf02RFiZWr5MAh6i:UHK2W0u1EO80+RXf1102bio62j
- TLSH T17E345901A7EC0615F6FF0AB8B8B055158B76F867E866D75E388C61AC1F73740EA60363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger