ScoobyLoader.zip
- SHA256 5bd05b63fa3748fb59f48cbcad8b2ebd4cc688bf7716f0a5be08310044c18da4
Behavioral task
behavioral1
Sample
ScoobyLoader.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
900 seconds
Behavioral task
behavioral2
Sample
ScoobyLoader.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
900 seconds
Behavioral task
behavioral3
Sample
out.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral4
Sample
out.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
General
- Target ScoobyLoader.zip
- Size 8.2MB
- Sample260822-pt8phsfa69
- SHA256 5bd05b63fa3748fb59f48cbcad8b2ebd4cc688bf7716f0a5be08310044c18da4
- MD5 cb68b40eeb1d27ac29fdb86336dcb95f
- SHA1 269c04ec6aff0072c71722eceac06d2eb2ce7007
- SHA512 d94f03f004e97ab4f8c9fd9db5980d6f13d33ac4a132c037cb13b6d72db5da698814affaf4544c518e1ea57527d1c771398da490510dc04b29ed64238ef42abc
- SSDEEP 196608:RkR/CYUoTxgrasaWgU7CqDM9DCVkqnL6QSXX9X3poVTbilqTHHZbteZ2EgQP:RkR/CO4asaWgU7CWWqEXXt3pwTbJH5bi
- TLSH T12F8633109103BAD3AA78546EE6E7E43C3F66F076A3F89F95C0761216BE20FC1115F626
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/ScoobyLoader.exe upx - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/ScoobyLoader.exe unpack002/out.upx
File Explorer
-
ScoobyLoader.zip.zip 8.2MB
-
ScoobyLoader.exe.exe 8.3MB
-
out.upx.exe 15.2MB
ScoobyLoader.exe
- SHA256 2a7d8c7d983d2d2084fd180c6d951dfb6e8c0d6a14f19f1aa63cdc25c3d12e5e
- MD5 a982f58296ead9ba5161c747d1318cc1
- SHA1 5938394c80e9e8346bd3eb91670e1f32dd9abbd3
- SHA512 cb747529a7f87db11a6554096d30c06a8e99dd96ecf13f83df84ea4a1de96452d168ae5c7d3ec96df80c8656f23c7d9a3d57634e98fb1d96ee0b3913fc3cc234
- SSDEEP 196608:0F/RbbowQ/Bxmp/jAv/kVhYpt3jnRvKHovQNUzKjB00EvqDU29Ofha:0FR5Kxmp/jopt3jRv1QmELBDUh
- TLSH T1989633CA009671A2E09BB570914BFCA1CA8A73B3AECC79644E13C2D71E795C2E753753
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
16500576
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
UPX0
Size
Virtual Size
7.5MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
8.3MB
Virtual Size
8.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
out.upx
- SHA256 4b88caf8a28850016f112b14446e06a73deefe6650c54d1f0ad3d70552f18108
- MD5 fb10fc653a664824e35199151a55ceb3
- SHA1 43e1e205567b2f12753b02e30a5b9350c14f2ddd
- SHA512 71c19fd15491f6efc8c27cdccc553aca5ee23017e0aca7010d9e6dc1664e8f5af8116b0cd28f5c75438b28a7f6650f24970b44b1242f09c31cddb23e359cdb06
- SSDEEP 196608:4Ogjau4ik1r5h5E9zRC8o60yD+6gvjfTzuQs3AiSNKlNjD1Ld0LszwkZrc:Hpzhe9zk8o60yqDTzuQs3AiXp1fk6r
- TLSH T1B0F6BE3AD411E4A8CC52C075B90A7221ADE0375B8B66A5FFE26D85692F372F90F3470D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
11052884
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
10.5MB
Virtual Size
10.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.4MB
Virtual Size
3.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
462KB
Virtual Size
943KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
138KB
Virtual Size
138KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.retplne
Size
512B
Virtual Size
156B
Characteristics
Name
.tls
Size
512B
Virtual Size
45B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
code
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
576KB
Virtual Size
576KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
101KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ