General
- Target VesperaRebrandPCv2.exe
- Size 3.6MB
- Sample260818-twfhzawapf
- SHA256 28e38778c44380a676d54516f2192f395fafb37c948b2b80f0738789fe9536fc
- MD5 bcc653a2b527bf2c4f0f753b6400f23a
- SHA1 66d7e8d492553276a2e944b4d2c645fd6cb166b4
- SHA512 2c413268ad03d459057cb80a9e86515af155062b3057b80e7b83236bae39e83c7ecc2638dc219940549007d72e8026c13fc993bc54c280f81f951dcfb509c7d1
- SSDEEP 49152:gkNiug8aOfsyd4tzesOjuhoL5hos5JsoFSAzd:M8CloL5hos5JsoFSAzd
- TLSH T17806F74369DB0DE9CED667B4A5C72339A778FD71CA2D1F2B9648C2201D536C0AD2EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VesperaRebrandPCv2.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
VesperaRebrandPCv2.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target VesperaRebrandPCv2.exe
- Size 3.6MB
- SHA256 28e38778c44380a676d54516f2192f395fafb37c948b2b80f0738789fe9536fc
- MD5 bcc653a2b527bf2c4f0f753b6400f23a
- SHA1 66d7e8d492553276a2e944b4d2c645fd6cb166b4
- SHA512 2c413268ad03d459057cb80a9e86515af155062b3057b80e7b83236bae39e83c7ecc2638dc219940549007d72e8026c13fc993bc54c280f81f951dcfb509c7d1
- SSDEEP 49152:gkNiug8aOfsyd4tzesOjuhoL5hos5JsoFSAzd:M8CloL5hos5JsoFSAzd
- TLSH T17806F74369DB0DE9CED667B4A5C72339A778FD71CA2D1F2B9648C2201D536C0AD2EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Blocks application from running via registry modification
Adds application to list of disallowed applications.
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification