General
- Target 6b400287304b5b0fe3d3fdb1b7dfd3512fb30fb7b8ae656718468695529a8318
- Size 8.7MB
- Sample260817-wdwtcaer6v
- SHA256 6b400287304b5b0fe3d3fdb1b7dfd3512fb30fb7b8ae656718468695529a8318
- MD5 5460dac370650ff9d841b38f1d1bd2f9
- SHA1 eeeb5815ca2ff721e4bc515ddd6722a28e560089
- SHA512 d852090a0213249a19aaae3d12798e14532fb41e54978161796a27546c0fa29f36f6b2958b151e14dd96915f872737ecfe643c87ce7b27cf07d717fa14b1550a
- SSDEEP 196608:KeGqlMCoDx7b9fqr87/7+kPo2F/T2JdvjPMYtXV15hRRzrC:KeG35ZFe2omadvjPFX1zRnC
- TLSH T19D9633DB3697FA65C2805135EEE3D263EAED7553CB608E6DDD3A0DC260DB3006858B90
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Debug/CREATIVE EAX.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Debug/CREATIVE EAX.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Debug/Default/discord_voice.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Debug/Default/discord_voice.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Debug/Default/openh264-2.2.0-win64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Debug/Default/openh264-2.2.0-win64.dll
Resource
win11ltsc2024-20260710-en
Malware Config
Targets
-
- Target Debug/CREATIVE EAX.exe
- Size 612KB
- SHA256 7f7317053a1e6692efc9a27989a2a875944a388afdf245bb8d434cec91bc8c10
- MD5 b353900241a21029ec2d2cb7a92144f1
- SHA1 903f7a18917ab2cee209baa0043c78c2ec92a32e
- SHA512 0e3675fafe1dee862957c2bfb534b640ffa6fcbb168d5fcc0f605f010461a1045e4d66f2f26d5c289c3f98192453fb0552735e255a9ede4a64f87b36c02acfc3
- SSDEEP 12288:Pkkkkkkkk9c/o90KfC8moMuKQFde/Qe/s0KCBUXAikxIoBNtQ3qSanZr0KF:7qqFdOQOUw9Q34x
- TLSH T144D412D4AEBAC320CE7F1BB888A6AF1313FB351B54D1C15688D658CEA757F111C8264B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target Debug/Default/discord_voice.node
- Size 17.8MB
- SHA256 f7398679665a989aa326cb1938096f4f03ebb8be22ab2bfb8ecfd56193adc553
- MD5 7ca31dd9f8ba7fe271d67753eb31d11c
- SHA1 b4b8a8a47bd22d39227c3d61e673929ac856f0d5
- SHA512 9e314b0e197eed14089a05ad7f8d90a2d2a1aa3a9b23d3dad0c04a35fbce228688ff91ad3e2fd01ae1e137e77866f7a1543b9afb3017507d964bfba6207f59bb
- SSDEEP 98304:bIqBpoBdu/RY1r8aFLjOO419Ar7PjQH3ZPsM/xad+WiCjCfwUYRbpM7/hbqByMi1:tByEiP4ZPsM/x7wZPyGP6Mw0it
- TLSH T17C177C0BF29250ACD45AC4B4876B6A22EA25784E033576EF57D487613F67BE07B39F00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Debug/Default/openh264-2.2.0-win64.dll
- Size 954KB
- SHA256 9b392bf05cff1199cc44af236fa672c717f484e79c99d35bf1bed153a423d2d0
- MD5 7ffbf336333754f961bb65aa680c4dbc
- SHA1 430483568eb72a520b72775c38b2caa1cc0343ce
- SHA512 0a7ce2c3b05dcbc7be950733a5191387376bb448696f68b76fb09b2f781cb32b2d1d19f0ec9d84ee69243669726c3e88e4d9c427ad41113ee48acee5535bf2e0
- SSDEEP 24576:bCE8T5Za1prFgHg6YVIi2R/xIrlqMVKhNJ724:bCE06SbIrlt+NJV
- TLSH T19E259D46F2A610F8D97BD074C97E9627E7B9300E13608AEB09E0C6156F23BE4563FB15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10