General
- Target AdvancedMechanics.zip
- Size 13.7MB
- Sample260816-p4kensbl6w
- SHA256 1df115a0f34d6be14139fbbee2a4b76cbe3996185da151bc6c311bfdd01dfad2
- MD5 3d619740fa051dc178fd04fbf97ff908
- SHA1 d004b2307de759f10e322c57e5f60e50259d6adc
- SHA512 7c7190d73ff6622ece2f08bcc091675da39834cedc891a3faa61a17f3aca8f40f193dcdbb8f35b76a7a6e08f2b245148fc704ded0520b037a755a38d523acada
- SSDEEP 393216:5IGyfROJsq8GQd9YkrLG1C9/56mFo1bf36PFS:qGyXaQ3YEKC9x6V7360
- TLSH T14BE633B24F2F3B72A9D1E92F5E9200426504D05C6CE19E0E4170F8AD91DB56F8ADBFD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AdvancedMechanics/AMCRACK.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
AdvancedMechanics/AMCRACK.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
AdvancedMechanics/AdvancedMechanics.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
AdvancedMechanics/AdvancedMechanics.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target AdvancedMechanics/AMCRACK.exe
- Size 10KB
- SHA256 93770202bd151660c9e6277c863f3e89cd797852d809514532315907d12efcf8
- MD5 2b1dde15530d58da02fb35c6168b5de7
- SHA1 a51421684aec930088424f6cf5d0ee2d1c8d3087
- SHA512 58d8f5948d9cc8289c93044ba14f2f7ea1809f83d5d3947fd0f076b8e8fd5eaf0b1cda83bffd29b7c066a2e2f1452527dd1fbc5ecfe5eae6956a0a87f6ddc131
- SSDEEP 192:NMKJBrMuj/wSUwlFDZQSNQFva8HrvUsZaQa8aeamwwRXXfobAPB0:Jv8sCFvzMskNhDmwwRXXfobu
- TLSH T18122B45AABE88904F4FF5B34E8724B01AA71B82B4E7AC74E04C504FD0E617E489D37A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target AdvancedMechanics/AdvancedMechanics.exe
- Size 15.1MB
- SHA256 c96ff8657be98f120a5d0a8ff779421e0882d13c0d5f5f395c59721713e8a36c
- MD5 585d48f187d8e43a8c190892bca99c60
- SHA1 a27f6e22082a3f9024607d274ef1b9c00f5f343b
- SHA512 fa1a262bc0bd6d0e4381aa05280bb518c8feff5e7c0323428cddddfe780212ea96497f5e29a620b12fd25c9ddb6c0bac0985a78603eff04bbd1278cda9e8cfc0
- SSDEEP 393216:ERY3Ndhd4g9mZVosVkEtplJkeKubkqk/F:x8ZCsiMlF2qEF
- TLSH T188F623C57BD4E2A8C0939A002BC763A9B0E5778F81FD4D5F39CB2C073951C2A8E5A975
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger