General
- Target somethingnamedbetter.zip
- Size 606KB
- Sample260816-be7xsaar7v
- SHA256 bcbf60e3ed60b83de3e5f8c462aba0d9b901770d47e17fc0d8d648ef0cb8867d
- MD5 c75b5c9b5bbd06784185862a59642def
- SHA1 ed2c88d55d18f9ff09d5190f1015bf3f71cdef76
- SHA512 a9fac4d91ad3efde8102976983cc05d13c5195c11d0a86a9ade66e7453c9890ace690d454bfda223079455cedcdc2b665e766d8daf896081c886af199b1c28c2
- SSDEEP 12288:WXtFJMOGL1cFnNfolVPN3L2lkK2JKxE/34JjhrKzHkXb20q9CvZh57FJjq2VkUYY:WXtFJMOGL1cFnNsX3aOJpysHp0ACZ7j9
- TLSH T1A0D4238D88981C17FF2853302A194776021B07D3CDEF19E2FAD97A13CA276C6B957E64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
somethingnamedbetter/Goodhertz_KeyGen.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
somethingnamedbetter/Goodhertz_KeyGen.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
somethingnamedbetter/please.bat
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral4
Sample
somethingnamedbetter/please.bat
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target somethingnamedbetter/Goodhertz_KeyGen.exe
- Size 669KB
- SHA256 991d59b3ae3ad0e42d7837cb3515479499dfbf2251eb67de647f079e842b390a
- MD5 9f8f96ae6768c343836d83a388ac2629
- SHA1 e252d5c43fe92570ef189c686afb05e044f49da7
- SHA512 1b44b6638f7cb6438084b54c95a7582289f5ebf1c17d1f72ae915f7bcd9bf9b1bfa880814a9ed35cb52503d4427d2b74a7934f90978e6e6980442e33ea657cc7
- SSDEEP 12288:4c9t2SllRl5pN3j2lkKeJut+/34JvhjKzHknb20qzKvZV5tZJHi2V87YC:4cLNB3CmJHG6H30YKJtrVe
- TLSH T1F4E4234AF9D408E7E926437015AB8B32233B7F918ABB0597B7D97F355533343601BA82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
- Target somethingnamedbetter/please.bat
- Size 222B
- SHA256 752c82282ed6546af5943b2ab02d9a9f82cb5f348d58cb02083c03888f34d5ae
- MD5 bfc8de7281f556658f160e5c909aac5f
- SHA1 d7d6a0c438bf3731a305a1f6c67d62c4a0828b2d
- SHA512 faf9fa1438e7357e8fd51528362d1683eb8ba73aabeb5ceedf4cd983015d888e9732691226cca79977009c588d0c916ba7ace67d9a20d2eb83627ef1b28849b2
- TLSH T179D0C947498FCDCB00008F1765F2A5CDE76E1C1A5F8435654780896B76C291CDCC7D2A
- MD5 SHA1 SHA512 TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL