General
- Target Voidstrap.exe
- Size 150.8MB
- Sample260819-xyftas1erf
- SHA256 665e8f173ff04cc9a3bd57ff2d9b26a7d4fbf4b2cf98e0d76a6e5e806639a3cb
- MD5 fcd245b0b82f0f9405aa870b81d2e02a
- SHA1 cac5eb847f76752ca19a09ba9ed63e444f5b37de
- SHA512 3b931d37eb327161eca508a1013aed80bc3e6db487654f96f5265fa4448d9dfc1792af2b3a7fd181b623a2b411e62cf037b9ce78155bf128ed16b40e8c0c88ff
- SSDEEP 3145728:j9lrEL/h8fNknAnIdY7lxiA+x4dE5fBp5CmPP+Gec6WdKbRH+oD4:j9lrELGfqdzVxwEZn5rPPv+e24
- TLSH T18E78335E17C2B98AE1B58EB292CEC965AB31FC59761B40295F6434D73F0B083E637D20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
Voidstrap.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
rat_final.ps1
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Voidstrap.exe
- Size 150.8MB
- SHA256 665e8f173ff04cc9a3bd57ff2d9b26a7d4fbf4b2cf98e0d76a6e5e806639a3cb
- MD5 fcd245b0b82f0f9405aa870b81d2e02a
- SHA1 cac5eb847f76752ca19a09ba9ed63e444f5b37de
- SHA512 3b931d37eb327161eca508a1013aed80bc3e6db487654f96f5265fa4448d9dfc1792af2b3a7fd181b623a2b411e62cf037b9ce78155bf128ed16b40e8c0c88ff
- SSDEEP 3145728:j9lrEL/h8fNknAnIdY7lxiA+x4dE5fBp5CmPP+Gec6WdKbRH+oD4:j9lrELGfqdzVxwEZn5rPPv+e24
- TLSH T18E78335E17C2B98AE1B58EB292CEC965AB31FC59761B40295F6434D73F0B083E637D20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target rat_final.pyc
- Size 213KB
- SHA256 a179f15979351059498b53ba3adf09ebcaa0651475968106eaa66b69f0bc0b29
- MD5 ff46dbe0d4bcb150adf450e79889333f
- SHA1 36e1679296f780e5f50a15c4d490f5f34e35fb90
- SHA512 713de929de249d8e79f1bd3f168599a34ff8f618d1ef25b1e998731c7cdcb41a7c522f42c8acecf114632bcea2ba65f7fd8c4743141dbbb049d267734265344b
- SSDEEP 3072:/1UQ1TCMe1JYMkNF9WPxHx3ZY7RIRUqzWYKwL36AM2hRIaeYBoF:iwTNcJYMSFMPxHx+7OUqHJL33xhRIVS0
- TLSH T15824C6467A26C57FF85473B5C8162706B3A4C0F1F300CB177A6BE029BE9A7682C664DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10