General
- Target malware.zip
- Size 7.8MB
- Sample260819-18mldaxwat
- SHA256 d6a4153ad497e8c96ea059874ed3609c351f6d421be0b2f00d4ea17af388ae84
- MD5 18b0dc3670faaff1f5cf280f3c8e0b07
- SHA1 75cc591ef5f62f4df58b0882d5a61e6020ac36f5
- SHA512 8b49e2e587b8884fc56742d2d34515286c9ece05351a3daf13c15959f66ee12b605928a1ed89f8aeedbca943d5ea43056d6a88d568f87cb98a41f55af6e21843
- SSDEEP 196608:Hy73s4xHUW72jM5iMnY7qZ1G1DXMmTaBBUOcWvv:Hy78YUW7L5rv2CK8+WH
- TLSH T1B086339454E03ED92A4466767732C75428518636B0B72AFD6BF2DB31E2FE0E1CF6A108
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
malware.zip
Resource
win11ltsc2024-20260709-en
0 signatures
600 seconds
Behavioral task
behavioral2
Sample
malware/Zoomapp.msi
Resource
win11ltsc2024-20260709-en
11 signatures
600 seconds
Behavioral task
behavioral3
Sample
malware/detonate_monitor (1).py
Resource
win11ltsc2024-20260709-en
4 signatures
600 seconds
Malware Config
Targets
-
- Target malware.zip
- Size 7.8MB
- SHA256 d6a4153ad497e8c96ea059874ed3609c351f6d421be0b2f00d4ea17af388ae84
- MD5 18b0dc3670faaff1f5cf280f3c8e0b07
- SHA1 75cc591ef5f62f4df58b0882d5a61e6020ac36f5
- SHA512 8b49e2e587b8884fc56742d2d34515286c9ece05351a3daf13c15959f66ee12b605928a1ed89f8aeedbca943d5ea43056d6a88d568f87cb98a41f55af6e21843
- SSDEEP 196608:Hy73s4xHUW72jM5iMnY7qZ1G1DXMmTaBBUOcWvv:Hy78YUW7L5rv2CK8+WH
- TLSH T1B086339454E03ED92A4466767732C75428518636B0B72AFD6BF2DB31E2FE0E1CF6A108
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target malware/Zoomapp.msi
- Size 8.2MB
- SHA256 2d074ef8fb5a80a17a27d53c31faaa4ec84af018fc691ecde8c6471fb7bbf769
- MD5 1b49bc0aab497da557a7306b84eb0d35
- SHA1 18745ae80410e54772dfb1cae055906dcca2a717
- SHA512 71d57762331743831171d3719e0d7991afff67d89e6703bf398871d1a1fac653aae26b861bb50520f2295c9ae91a1c053cac42b417ab012e5e557b0083a768b3
- SSDEEP 196608:oW5jxDeR/S4/Zs/zWuS76ji3Ylz1siaIoImK:bj9US4/Zs/SuLGI4xkm
- TLSH T198963319BBE018EDE876437585638620FE717C193361D6AF47B0B1299F3B3A0A5BB305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target malware/detonate_monitor (1).py
- Size 25KB
- SHA256 4df8168efc80c99f9905ae81684284491cd68c3008ce8326b6e7897975a6e6c3
- MD5 f02b535ba9220ac3397105f89c074825
- SHA1 453980df1f7860006b5a8496ca9b8204af10fccb
- SHA512 049b0fabbd86f12cd467d3b7123086118436f35160e2bb420bc049eedf6d5261955d51a242b736512984be979311da755cbdc60a2eda3f4ccfefe3d21762ef07
- SSDEEP 384:TC02+NynMPMo8Sf/jjfm0wLvU0wJD1bF8kgIkV1M33cagumb:e02+NyMV/jnyUzFdF8kgIkbM33Sb
- TLSH T1F5C2E812DC6A0866E383D51C1A96D101E722BA37790129387FECC7B81F5D87D81BD6ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10