General
- Target name.exe
- Size 15.5MB
- Sample260818-hcbj5axfnd
- SHA256 c03c5c3e121bd8b7f4b69d0dc0720186c6e199220f952e2fa430a44f3540fa17
- MD5 8bbefbc7b66f613bffa8e8a4879b9a9d
- SHA1 9baf653ab8c61e7d8938eea5673eb388d247da00
- SHA512 7a9bf20dba9eb7b7521bb12942b188d42676dc88a960d9f3712730ae3dfe0aabedb076e9f26b2cbf2d20feea3a02a241c1ddd4ce83aec18e39ed462f189650b9
- SSDEEP 98304:JBpAsydm2Hp/zHE/NeAKNg5oUcSvzgbu/lzJ84evJPHQEuZqt:JPsdVHp/GeAKaBpg6/lzJ84sRu
- TLSH T13AF62963E8D219D4C4EAC170C672826BBA613C4D1B395BD706A0F7211F36BE0EEB6751
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
name.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
name.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target name.exe
- Size 15.5MB
- SHA256 c03c5c3e121bd8b7f4b69d0dc0720186c6e199220f952e2fa430a44f3540fa17
- MD5 8bbefbc7b66f613bffa8e8a4879b9a9d
- SHA1 9baf653ab8c61e7d8938eea5673eb388d247da00
- SHA512 7a9bf20dba9eb7b7521bb12942b188d42676dc88a960d9f3712730ae3dfe0aabedb076e9f26b2cbf2d20feea3a02a241c1ddd4ce83aec18e39ed462f189650b9
- SSDEEP 98304:JBpAsydm2Hp/zHE/NeAKNg5oUcSvzgbu/lzJ84evJPHQEuZqt:JPsdVHp/GeAKaBpg6/lzJ84sRu
- TLSH T13AF62963E8D219D4C4EAC170C672826BBA613C4D1B395BD706A0F7211F36BE0EEB6751
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Adds Run key to start application