General
- Target 3f78be6c23d7cd60fbb00f99bfe65a10d4e30b2f8a1ef44e98530e8fb2f76e44.bin
- Size 111.6MB
- Sample260817-pjc5vsar9s
- SHA256 3f78be6c23d7cd60fbb00f99bfe65a10d4e30b2f8a1ef44e98530e8fb2f76e44
- MD5 328481070468d75a70257a040064dd6c
- SHA1 cccf0911fbafa3af210bf6046452eac2da41e37d
- SHA512 0fa6e3bd022d39f25355890020c6bef346d8a5efabea695bc93bfe2404024d87b502ba76619cc5a06c63697da65677dea5c5bb392fc0a7b4db1eb885d6686901
- SSDEEP 1572864:1Pp36F/iKRzQo0EL9uXpXFxAI/MZqNrGZVOc4XIoC3MnluZQrZ1:1PpIlQheuXpX/z/5NivOcC7hlTrD
- TLSH T1EC48F01663E111AAD577D138C7AB6603EB72B40713308BDB329C43652F73AE45E7AB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3f78be6c23d7cd60fbb00f99bfe65a10d4e30b2f8a1ef44e98530e8fb2f76e44.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
3f78be6c23d7cd60fbb00f99bfe65a10d4e30b2f8a1ef44e98530e8fb2f76e44.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 3f78be6c23d7cd60fbb00f99bfe65a10d4e30b2f8a1ef44e98530e8fb2f76e44.bin
- Size 111.6MB
- SHA256 3f78be6c23d7cd60fbb00f99bfe65a10d4e30b2f8a1ef44e98530e8fb2f76e44
- MD5 328481070468d75a70257a040064dd6c
- SHA1 cccf0911fbafa3af210bf6046452eac2da41e37d
- SHA512 0fa6e3bd022d39f25355890020c6bef346d8a5efabea695bc93bfe2404024d87b502ba76619cc5a06c63697da65677dea5c5bb392fc0a7b4db1eb885d6686901
- SSDEEP 1572864:1Pp36F/iKRzQo0EL9uXpXFxAI/MZqNrGZVOc4XIoC3MnluZQrZ1:1PpIlQheuXpX/z/5NivOcC7hlTrD
- TLSH T1EC48F01663E111AAD577D138C7AB6603EB72B40713308BDB329C43652F73AE45E7AB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE