General
- Target LoderErfan.exe
- Size 2.6MB
- Sample260817-thpvgsthke
- SHA256 d63248f0fc7c7ce88c45040da2e20cac9579401104e3c65adc9cdce0fd01ec0e
- MD5 0f36bb3b542d87ca6d9dd24af29b4310
- SHA1 c526668d4d131bf42925b0ea6bb3951a072bd1bb
- SHA512 ced01efb233e6da8d1edeb3e5a09a7f0664799ddceeb27c1ee113b5917d2d354e7997e2b91ee9d67fa87135d6517f78388117dfa4d6b3785361f83d85bf71ad4
- SSDEEP 49152:tg8b8queRNfRv9aSjiFEgrcMBI39zdT8+HE3/OwaplkwgclLX:K8B9jJgkNpl+clj
- TLSH T1F2D5BE47A3A201E9C167C178C6479717F73178050320AAEB67E44F962FA3AE17AFB351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LoderErfan.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
LoderErfan.exe
Resource
win10ltsc2021-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
LoderErfan.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target LoderErfan.exe
- Size 2.6MB
- SHA256 d63248f0fc7c7ce88c45040da2e20cac9579401104e3c65adc9cdce0fd01ec0e
- MD5 0f36bb3b542d87ca6d9dd24af29b4310
- SHA1 c526668d4d131bf42925b0ea6bb3951a072bd1bb
- SHA512 ced01efb233e6da8d1edeb3e5a09a7f0664799ddceeb27c1ee113b5917d2d354e7997e2b91ee9d67fa87135d6517f78388117dfa4d6b3785361f83d85bf71ad4
- SSDEEP 49152:tg8b8queRNfRv9aSjiFEgrcMBI39zdT8+HE3/OwaplkwgclLX:K8B9jJgkNpl+clj
- TLSH T1F2D5BE47A3A201E9C167C178C6479717F73178050320AAEB67E44F962FA3AE17AFB351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory