General
- Target voidrun_decrypted.exe
- Size 6.9MB
- Sample260817-vp5d7ace97
- SHA256 7a2cd8ad7f8d9b1b29b16d7a337ab75bff7a5b5950c0e06d2879e5c1d116c818
- MD5 e366595c1b33e1a643105b34b3285d0a
- SHA1 b0399b33dd2d52dfe97f8cd8315a41b8dbd26883
- SHA512 765a093ad9238b3eff9147dfadd6b9b823e94e90f2675c8887b9d8cdc1e2ec8d6b6c7f29f8403ef1bf56d9dbf5163c3d066e0e16caca3917cb6e4d95f286e66d
- SSDEEP 49152:Z3SDpxPfidJAeqYmHViP0fQAtA4oIhbUfGtN4FVzDkYxaTRamfzKmN5dG0+UNNGm:oOPENNG9pIUgjyfY+Z+kzSSLA9yi5B7
- TLSH T1DE769D787E7560DBF782F0776A90CC2117336DBD9341EEC02A85EA89BE43D5E24250E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
voidrun_decrypted.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
voidrun_decrypted.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target voidrun_decrypted.exe
- Size 6.9MB
- SHA256 7a2cd8ad7f8d9b1b29b16d7a337ab75bff7a5b5950c0e06d2879e5c1d116c818
- MD5 e366595c1b33e1a643105b34b3285d0a
- SHA1 b0399b33dd2d52dfe97f8cd8315a41b8dbd26883
- SHA512 765a093ad9238b3eff9147dfadd6b9b823e94e90f2675c8887b9d8cdc1e2ec8d6b6c7f29f8403ef1bf56d9dbf5163c3d066e0e16caca3917cb6e4d95f286e66d
- SSDEEP 49152:Z3SDpxPfidJAeqYmHViP0fQAtA4oIhbUfGtN4FVzDkYxaTRamfzKmN5dG0+UNNGm:oOPENNG9pIUgjyfY+Z+kzSSLA9yi5B7
- TLSH T1DE769D787E7560DBF782F0776A90CC2117336DBD9341EEC02A85EA89BE43D5E24250E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Server Software Component: Terminal Services DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory