General
- Target Release-2.1-beta.1.zip
- Size 478KB
- Sample260819-tk4reszxhs
- SHA256 7225b04c5ea91d3ce5fda1baae2c9fd7e5b7d1fab886fc0967233f70edabbfa0
- MD5 c89c0da0aa068880b07f3d5ab39c5141
- SHA1 6dc9a44a795d253b4d4518900c1170581093a48d
- SHA512 18bf53c85b773943d0b863c1e11f4b6304b45f286937db5f8904be3e650523644bf4332dc970c44ef9183ebe929faa0585eb2c8b5f60174e297121b82ca50246
- SSDEEP 12288:57VyGYUv4SnAQPKTYNk/wm+iTcchv4xtHYc2OnZG:J6Uv4t1cNk/wjibhv4b2On4
- TLSH T130A42352716A3D1AD0B5DFBD9CC0B6DBE0750035251E36E1A382E9CAF9C4035AB8BE17
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Application.cmd
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Application.cmd
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
certificate.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
certificate.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
utility.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
utility.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Application.cmd
- Size 33B
- SHA256 24cdfb100ad9f06798f0c21f5912a98f0c954ffb3477adae9cf86e8521b999f2
- MD5 04f9eab73b35e8047bfb0cdb56418722
- SHA1 2de7694a6ffc46c4bd7bda7955200d664e0a8781
- SHA512 f524b872231b1aa82e37b2077dccbeb25fa92092959511d7d415dcf7792ec7a3be21c4283939584e5793bb0098e9fe1064a8445f6dc0821f3b71af05d8855ae0
- MD5 SHA1 SHA512
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target certificate.txt
- Size 195KB
- SHA256 52188dbdebfc8c224ccaac16626b048004ad3447b06ce21d3880fa248cb6db70
- MD5 d4608258cb475d41e49ac1ee0963efb4
- SHA1 cbb9eff8546766668d7583720c23357b550ecbec
- SHA512 63fae027b9b4b753ad323b070ee99d5b9b90b21d0fe6c6928c11b5c51430a868c6b3c6db62343daebae0422df4c95e107117e5a4307d66be0beaf5a43fae409a
- SSDEEP 3072:x7/AyUuqySF3Q8Dkh58XNWFyuxfUAlq+vF041J550HQUiJ:x74yUFrF3Q8DkAXNWl7F0kJHkZiJ
- TLSH T161143059A1CC5CFAA6DB81A0DC9BDD9B70F7C1E0030D6BAA0F34D1A675B1231D6CD81A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target utility.exe
- Size 742KB
- SHA256 e227d47facf0e2f5b9e5c54a23a86b31272696b64bbbb9932a31fe06973677bd
- MD5 7a59df9ee2ae38c391b60c001d8fef11
- SHA1 a5fa49ca3da03fb01f2a96fa99521f263665f9ff
- SHA512 8237b3fd2a41a08bfb8ca95060e1a7f8b030538d587746b1b050d1ce0f2a6f4898ff31e65243c97e6b343a8112159839cfa85f47ecffc20a621dac64cf947b7a
- SSDEEP 12288:PFsr3uNFZnKsXrLdiu7c7nu86VDfU/+tZxMUJ4EBiSxsyYA:PFs4FZnKsrLdiCUMs/KiesyYA
- TLSH T184F4BF81B6D381F3D992117148B9A77A0E3D6D1007259CEB83D43AF68D346C0AF776AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2JavaScript
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1