General
- Target RonaClient.exe
- Size 2.5MB
- Sample260818-rcw1hatcqh
- SHA256 e6858df739134a51e01014642c4b17e1cf311700c6f9e78f410c94be7dcd737f
- MD5 3c242e3e7c3ec6a3711ab24a0895d958
- SHA1 6e2427a4fd56884d558f506d5d5dfabd13a22ff8
- SHA512 5ec73b1420b78b9cc2e1ff13d4126060e4f0406f11ffebdc963ffcac99dfdfdc2c9833a4cd33a5972c09d813b54f8902680785aee350e5b582f22afbbd63f08a
- SSDEEP 49152:I6Nvf+Yc+nzuYr7XNJJt5RJWLTUKstLmyyqLeTgcFiHvCwnAM+wk9tf4:bnJ9JJiLTUKstSyy7wvhAMaJ4
- TLSH T145C5C0086A7E4EF9C471AAF4CD079D2BCA727D914B3115FB129008425B21DE766BFF28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RonaClient.exe
Resource
win10v2004-20260513-en
4 signatures
300 seconds
Behavioral task
behavioral2
Sample
RonaClient.exe
Resource
win11ltsc2024-20260709-en
3 signatures
300 seconds
Malware Config
Targets
-
- Target RonaClient.exe
- Size 2.5MB
- SHA256 e6858df739134a51e01014642c4b17e1cf311700c6f9e78f410c94be7dcd737f
- MD5 3c242e3e7c3ec6a3711ab24a0895d958
- SHA1 6e2427a4fd56884d558f506d5d5dfabd13a22ff8
- SHA512 5ec73b1420b78b9cc2e1ff13d4126060e4f0406f11ffebdc963ffcac99dfdfdc2c9833a4cd33a5972c09d813b54f8902680785aee350e5b582f22afbbd63f08a
- SSDEEP 49152:I6Nvf+Yc+nzuYr7XNJJt5RJWLTUKstLmyyqLeTgcFiHvCwnAM+wk9tf4:bnJ9JJiLTUKstSyy7wvhAMaJ4
- TLSH T145C5C0086A7E4EF9C471AAF4CD079D2BCA727D914B3115FB129008425B21DE766BFF28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger