General
- Target Vivid.exe
- Size 8.7MB
- Sample260820-bgbmcsag27
- SHA256 8610ee3ca85bf0d136b7455885472781a54d1144d6ca7cca441e83fb7802b6e7
- MD5 6d3fef7254840c8ade7c8e121ab7019c
- SHA1 144758f740cd0889ac5baa7c380027987b98a409
- SHA512 a36c8505ffab579639a58fd2ce2035c0cefd48ec97b59ca42dd88314e4595c639388f920446e73b2d2be395e91885509ff20036334263c736698d817cda7e329
- SSDEEP 98304:AnwHf6RB9AP4T9E25Psnt0FME5NHGL/8I/CzbOnI3Xvxn1Y01RrW59iMfiJ:AwHyY25tQu+E5Y1K+I3XvxnhWj4
- TLSH T12096D04663A901D8D07BE1388B43AA17F2727814133186F76BE06A655F77AE0CF7BB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Vivid.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
Vivid.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target Vivid.exe
- Size 8.7MB
- SHA256 8610ee3ca85bf0d136b7455885472781a54d1144d6ca7cca441e83fb7802b6e7
- MD5 6d3fef7254840c8ade7c8e121ab7019c
- SHA1 144758f740cd0889ac5baa7c380027987b98a409
- SHA512 a36c8505ffab579639a58fd2ce2035c0cefd48ec97b59ca42dd88314e4595c639388f920446e73b2d2be395e91885509ff20036334263c736698d817cda7e329
- SSDEEP 98304:AnwHf6RB9AP4T9E25Psnt0FME5NHGL/8I/CzbOnI3Xvxn1Y01RrW59iMfiJ:AwHyY25tQu+E5Y1K+I3XvxnhWj4
- TLSH T12096D04663A901D8D07BE1388B43AA17F2727814133186F76BE06A655F77AE0CF7BB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger