General
- Target e55280bc76e1209e621185b874952c236fa434c489ef41d4c57e981d7885345b.bin.zip
- Size 1.3MB
- Sample260822-ppln7athpa
- SHA256 e55280bc76e1209e621185b874952c236fa434c489ef41d4c57e981d7885345b
- MD5 79f3d96177e380f3f2a6f198233cab90
- SHA1 cc9d556d4afd30e227d4dbe1cd3c2fc5216bf6ac
- SHA512 a1822fb5590735812ffa1b6fd6711307926525f9f999a03c1158bb03c7e0a69bdeba7d8000db9d9a97b605238221e81c15eaf09ab6534c5ff640065234d8b236
- SSDEEP 24576:NNLWtZb4zr910syQ9dzzFARsxeIcYYQAxItQfUNrpdVJQjezaVqTQ3ftGoHaoRj+:KtKzr4syQ9V9EKYQAxItQfUNNLJLOVqB
- TLSH T1605533F87486B5FAD372B928F1B7CB10702273E6D5763111672DFE898DE947224E2608
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
libvlc.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
libvlc.dll
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
vlc.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral4
Sample
vlc.exe
Resource
win11ltsc2024-20260710-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target libvlc.dll
- Size 1.7MB
- SHA256 36590e90cdc2c7f42dc2199e15e8e4482cf736d44b358403fed0918dcd8d6748
- MD5 2e69389fdfecf57fd91acbf88a193489
- SHA1 3e802c13e5d34de200e27009db26f2aac2a5d18a
- SHA512 2734615603948054c2c6ba451915dc64752c92a531d17f93b630514e87719426144fc5185cb93ec94a0460a17e1c83332eed1d0d1e96ad75143a6b0c88931f3a
- SSDEEP 49152:pjUBR5QGSx8Mkyro0N4zKDN8ftwsfNqRZw5l:22GO08o08KDNmtFlqRZw5l
- TLSH T12F85B0A43ED025F4E2B4CD76DB5BF6B4126F366F2D436BB7022092313A3215AEA43D15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target vlc.exe
- Size 1021KB
- SHA256 bfa5740f028a8f310ca01c779bbc5f2f1b435c41539c54de592f715bb0c10389
- MD5 f0a4d5c3492115bfe2f346bc7bdce396
- SHA1 bfcbdc7d0cbb92b68d348090fe9f381b4358a587
- SHA512 8e4b2e1852fbc821cab4a7c16675afbfa2588472faa1848600829c415bfbee7cbf4713568ba15a76916e6c761d79b0fff7c5a1ae087aabd912bb7063d38a560a
- SSDEEP 24576:uGKuKkPztKt9cHPrLRAqKBAy1N1UGAmnnnFnnnZnnnGnnnsddodt:uGKuKkPzgt9cHTLRAqK81k8
- TLSH T1A9254B1BE7A345EDC56FC13487A7C772AA30B86942347E2E1D95DB221F10E609F2E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Accesses Microsoft Outlook profiles
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
2Credentials In Files
1Credentials in Registry
1