General
- Target pyinjector.exe
- Size 11.4MB
- Sample260822-cxymhaea64
- SHA256 255bba73557a4161dc712a21ab4b5be8fd3a34dc62700f86a747dc9814459cc0
- MD5 470296ab9969c798bcc47e39b0210baa
- SHA1 83d3232f66bbfeb78f39727d3452c41eb1ecb939
- SHA512 4b49cf24e946c69bc3db406548ace26c67e191301e4ee01fda811c672afcc82eae3de19d4c7ab0f06fe3984f87c5a884a116e04f4b79ce325e1bbca0d6b3c98f
- SSDEEP 196608:Xa85DbJrteZyZ1/rgj1W903eV4QRcgMToEuGxgh858F0ibfU2gAB+kO4atsk9g4+:K85vz8KcxW+eGQRjMTozGxu8C0ibfirO
- TLSH T175C63385A2E408FAEAF2823685578857E231FC621364D9EB1734E3561E77382CE3DF54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
pyinjector.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
pyinjector.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
loader_stub.pyc
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
loader_stub.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target pyinjector.exe
- Size 11.4MB
- SHA256 255bba73557a4161dc712a21ab4b5be8fd3a34dc62700f86a747dc9814459cc0
- MD5 470296ab9969c798bcc47e39b0210baa
- SHA1 83d3232f66bbfeb78f39727d3452c41eb1ecb939
- SHA512 4b49cf24e946c69bc3db406548ace26c67e191301e4ee01fda811c672afcc82eae3de19d4c7ab0f06fe3984f87c5a884a116e04f4b79ce325e1bbca0d6b3c98f
- SSDEEP 196608:Xa85DbJrteZyZ1/rgj1W903eV4QRcgMToEuGxgh858F0ibfU2gAB+kO4atsk9g4+:K85vz8KcxW+eGQRjMTozGxu8C0ibfirO
- TLSH T175C63385A2E408FAEAF2823685578857E231FC621364D9EB1734E3561E77382CE3DF54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-
- Target loader_stub.pyc
- Size 101KB
- SHA256 7025795ef2dcfc0ec695ba4a04241f857b5d31fbb5e113affe6dae981265b8fb
- MD5 9f58a0dc2edcc8a9cf34ab15a74d67fe
- SHA1 1d9566be4ae8ff49528749adfd5de8ed41f63e5e
- SHA512 c1b4238b4ed641db65a9a3dd0a2a2cc63acdda4dfcb7546cf5012e1210ca366ff012fdd454b61f28cb397b45049c8d0c9fca44518ce95c5642649cdcea6015ab
- SSDEEP 3072:Op69ExDBT81n2YLxcVL2iMltPPE2lGF9kMYOlc:OpzFGntLxo2PPCnYOlc
- TLSH T139A312909E8AC839ED4BB2FA4477370A36D4170B7AF1439306B964AA0E0F5471FD82DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10