General
- Target main.exe
- Size 9.3MB
- Sample260818-g1d5gsff97
- SHA256 1de4813e9f13d442b2e75220272e4dcf53840d6818ad3fab5e64ce9efeae333a
- MD5 a96cf3cb38daf99a8db535b941ccdb85
- SHA1 09990661866bd63b8dd3b24e5c2c25f00eb89e3d
- SHA512 01af194946ea3177cbb2ca93c8d01363e31ab0f6b46ed358c7eb1ffad869c42f82b9de35eb6b71132eac83b4a440f5cc397276e23228035cb078c7cd8c9b2636
- SSDEEP 98304:An65nuUqD45JvD7o9WEzR5a2bGrp7aQgoPckhCqf+w82uQ:AOfLML3bK44PlCC+h27
- TLSH T168A67B03ECA554E9C1ADA23189B392137B717C891B3263D32BA0F6392E76BD07D79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
main.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
main.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target main.exe
- Size 9.3MB
- SHA256 1de4813e9f13d442b2e75220272e4dcf53840d6818ad3fab5e64ce9efeae333a
- MD5 a96cf3cb38daf99a8db535b941ccdb85
- SHA1 09990661866bd63b8dd3b24e5c2c25f00eb89e3d
- SHA512 01af194946ea3177cbb2ca93c8d01363e31ab0f6b46ed358c7eb1ffad869c42f82b9de35eb6b71132eac83b4a440f5cc397276e23228035cb078c7cd8c9b2636
- SSDEEP 98304:An65nuUqD45JvD7o9WEzR5a2bGrp7aQgoPckhCqf+w82uQ:AOfLML3bK44PlCC+h27
- TLSH T168A67B03ECA554E9C1ADA23189B392137B717C891B3263D32BA0F6392E76BD07D79354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Adds Run key to start application