General
- Target axontweakspatch.zip
- Size 19.0MB
- Sample260816-fr128a1vbw
- SHA256 bc9553b11643840890dab1e3d4108f2e887f4d63fc86634c269f1fae7fd68d80
- MD5 41f533302708841bfdb4f1203f717171
- SHA1 b9c69d5619ea2b5bbe0dd2ed2d48530c5e5fb5b8
- SHA512 3f1b27cdf2725ec40e7284d84224cc87aad56ef4c2519f6bcca9e712d3494282d976a752ade90236650f989f8a3e9f0a7e0732f99f79eb99e5aac64b24a0df27
- SSDEEP 393216:/twMrbCJ2x0MqCuHk9yEcQ2Cg9IwPPJQijiG3QDtZFGecjPON9:iM+u0NrE9zj2j9tBVjijXFdJf
- TLSH T1A417332224436DD8189F35C3D0F6216BB37AC354F3D28AF2592479D9EA2B077FC58692
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
axontweakspatch/axon_tweaks.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
axontweakspatch/launch.bat
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
axontweakspatch/server.js
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target axontweakspatch/axon_tweaks.exe
- Size 22.4MB
- SHA256 d3319564d13ff1404b13dad0aa1573ae2d7b81a862b68a8f5c27c856b3900a22
- MD5 48ceddacde08cd1f01dbe2dea22f2b9d
- SHA1 9c8ef510aa8756df089f18000985b7fa894bad85
- SHA512 7e348ee35561be313f1915ee8fb3484c56a630f8c7420feadb746556c4afa0b7a594b6d7c9834640a3aefe41c1fcbb0c68e6c776573267789b39251c6b4913e7
- SSDEEP 393216:83unw399lgl8MYjINTQ8Cuptr+rLFuxwMx0BfFXS4WVdGR:Jw99+l5Yjc08TptrKLMxwx7XvR
- TLSH T1AF371216F341CB59C17216748863DB1297F5B620AF22D7D7BBA66D306F127E04EB2382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target axontweakspatch/launch.bat
- Size 3KB
- SHA256 0ce99026f534eb9f6763c9df0bf27117dac8a09d82ea866ef1831ca8f5c81fc8
- MD5 63b65a0c6e8d1adf74214062daa95a12
- SHA1 e569d11b580189d314e03c625b5bc4071549818e
- SHA512 18cb15234f79ec72c2a50f050d02162a68c8d811e40941d8c8b513b0ad490cf8aa0087a8ffe75f6f9d2231dc25ef0639b77247cd3bd2ebb418ed84be6ca14cd9
- TLSH T19681961653498F3A19D94722896350A57A29808F02463EC371EFC2D67F0ADBCDBBC1C5
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Drops file in Drivers directory
-
- Target axontweakspatch/server.js
- Size 5KB
- SHA256 54b3aa7b7529e1bd650339af543fa7c10d28a6d983b28d82cfcbfee916f6a634
- MD5 e995676cbc0e0796b25c2c8f77f7ec5d
- SHA1 0077798efcbf4dd4e172e7d019795e2e7703bd33
- SHA512 e72bd79ac5ab6e197e144bc043c7a0bac23b10c0c4e9c9aac9efe8558ce0626ae03d88c24b53aa820a8a5eb042b53c0e79d1f0892aef0b4ba99cf6663fa1de79
- SSDEEP 96:OBNSB5SW83UJI8XDjD6c9OXxWEsfoIEFU4nKJTNf43H7HFGR2uXI3Ebbu:ySBlnVDv64O5YfEFUWKJTNfEHTk8
- TLSH T17FC167C67DF26029D1F79128815B9D07762E80033219EA72FAAC27047F9547897B3ADC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target axontweakspatch/uninstall.bat
- Size 1KB
- SHA256 3eeb6f5aa23ee4549ac632cf5eaa501df8637949d77e7c8b70d1c7e1b53a1a46
- MD5 6a6fad33a786efd2e903e86a76a96817
- SHA1 f3d98d0b29cdc7947863417ef7423b033ab64ef8
- SHA512 7aa12a11293a5f5c0976040c575fa0b62c150064bb4b9fdb30fdf99e7b4570e5aa2edd65407dc45f1cbc96494b525524c7da2f331f9378f5738c01eb290c7d3e
- TLSH T1DD3192A2C7C1DF350CDA8953E46790A03B1A510B4315AEC272CB93D83E40ABC873C4C6
- MD5 SHA1 SHA512 TLSH
-
Drops file in Drivers directory