General
- Target Loader_v3.5 (1).zip
- Size 130.6MB
- Sample260818-p89kcshd83
- SHA256 0848b27a1a8dbf1933ad0c0fe9f61da4c7c98f213cc64d68f065010b27067e86
- MD5 a5eab755ea99dafd8836718d0d36c96f
- SHA1 b67ea5724bbcbdae1861405a92483001c423b06f
- SHA512 bc8d0864920083abd370362a3b072a1514cf428a0ee4dd23c1c870e58c7838ffeae491fe7b7edd6e0a098533f6fc7ae7f67b0ce84aa8e166d38dcd07b6793f3a
- SSDEEP 3145728:CKP50wZbZxVxCUtIXK9YpYnGp2TgOkz5vhn8eaxovQ:CKP7xVxzIXgYpvigOkFvjasQ
- TLSH T10568331C8B2FCA02DC57FF3B53339E5B9C251249171BD06E55ED399F4D8D8AD2AA008A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Loader_v3.5/Loader.exe
Resource
win10v2004-20260513-en
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
Loader_v3.5/Loader.exe
Resource
win11ltsc2024-20260709-en
5 signatures
300 seconds
Behavioral task
behavioral3
Sample
Loader_v3.5/helper.dll
Resource
win10v2004-20260513-en
0 signatures
300 seconds
Behavioral task
behavioral4
Sample
Loader_v3.5/helper.dll
Resource
win11ltsc2024-20260709-en
0 signatures
300 seconds
Malware Config
Targets
-
- Target Loader_v3.5/Loader.exe
- Size 93.3MB
- SHA256 d8a4c13feae3d090348936009ad9704acee2ef837f2e03e4e1ee160132911c64
- MD5 54ee88fa4edaa990e756c4e5edae3911
- SHA1 81ccb0739c739fda1b564038b488a4538dfd7fa0
- SHA512 b5e98ab9bb93622ea418c43cbd5bb8ffab315709ed438e0cde8bfe457dbe10d1e632f8d6103b54d9fb5457581e97b7924993c7020cad6946aa5724bbf3a69c5d
- SSDEEP 1572864:IZa7hmguP2nG0/Vyv7UhgxIabc/x7Awby:IZa7hmguP2nUOnAwby
- TLSH T1A4286C43A2E751D8F0BBD17497E65323E932BC490B3469EF12944B312F72AE0A779B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
- Target Loader_v3.5/helper.dll
- Size 978KB
- SHA256 3c1df4abe037e905125e18b277e4b6d8b5857466b4f6cd50db77437ca5f8137e
- MD5 8d456d1930bd46be40551002de6cb3bf
- SHA1 0d522e8e50e1b7aa28cff1ff525293d0ccf2363d
- SHA512 f0b6789692ce680bf39a059cc5e63ec4b8a27f164030e2b111f7d5b6f5b66730d33064ea58c95a8d8154ab127f05eb0a9ad19209188f145ba98b1b9209e2c5c1
- SSDEEP 12288:G5HFuE8dHq+vM77ofcjWusWSsWncoDcD6G+/PWD1XAM5yXIm78OYX4E1njkmQ3wm:Xd7UImWywpUhRNWboO4SwhqoUu/9C
- TLSH T18C25337F0B39A8A9C659949E00F474977D0864FC2BD9C36B65F23A3F6B6F701A031924
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10