f6d7f3d35845cf4bfbd70e0a4a71cec1ac82ca3ca696ec8bf22ecffdf130f5ed

Sharing

Copy URL Twitter E-mail

General

Target
IDIOT.EXE_20260720.zip
Size 370.3MB
Sample260822-y8tzcatxcv
SHA256 f6d7f3d35845cf4bfbd70e0a4a71cec1ac82ca3ca696ec8bf22ecffdf130f5ed
MD5 4668cacca2e17ac78262bbbfc9feec0c
SHA1 1fce2f5760949a6f4d092d2fee10c17f9bee4a90
SHA512 566af58b155a9ac6b677efcb3c3e87291a9d05ff463005d54ec601164299df9a1ad8b41e256fb6b02a626cf91fcd2b2b52597cd0f9bf99fb52fe4188ca68a1a7
SSDEEP 6291456:Qw7/waiLqkaTCZ6tCmI0Cxkw76PqzlFewsAE5sozOs12MNcAyuQDkfnGOiRIdv8d:+aCqkaTCZSu76osAE5zzOskMa9HkOOj4
TLSH
T1840933B830EF4A72F776BE3F514763916821533C65BC6FA8331062A2A5026961177FCB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  VC_redist.x64.exe
- Size 17.9MB
- SHA256 843068991daaa1f73ad9f6239bce4d0f6a07a51f18c37ea2a867e9beca71295c
- MD5 8da7373f3ec287fe1c3ad72a7b2922f0
- SHA1 46adcdfbe9aebe767657b7a802cc366f827ced77
- SHA512 c42c82cfd5eaa2165b600f6109cb14ff4308cdf4cff656a1375b4a933f1630bfe54c99c4d0fb9ed3bea4dc4e4fdaa3db8e7c58356cca07c2954f4c297757d62d
- SSDEEP 393216:rCpQ/hbBWGW1tkWSz61gUM0SOm53TgypRvlxoMtBpMw4OrW:rCpQpbQ1tBj1gR0SP53tRvlLpM2K
- TLSH
  T133173332A4742132F6F16437F968F1307E3CA72863D09D99D3C8AD99396488267F725B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  android_studio/D3D12/D3D12Core.dll
- Size 4.5MB
- SHA256 625bd40005b1c3708695d5256ecf230d278e6b8edba5a88af70f3d91324f3052
- MD5 8bed03240b764906c937c0d6ccd560ac
- SHA1 2a38a4d7116b9d067e9d24d7da2646e2fc9f61c6
- SHA512 6fce3c735a101794634c53fd622be20e69e75c68ba216d0caa0fb48aadf97ed55ceb6ef205a4ea22f405bf5e663638add2f489df720c206739920093479863a7
- SSDEEP 49152:+h38HT1tnrx7KGN6McyBTwbreXHYTNeZQROL+qgGVO9EflU7slMWr+IGrh4TeeYo:IMBxrfwNFrfau5e/H
- TLSH
  T1B1266C07BBA840E8D4A6C079CA6B461FE7B278654370E7CB169087995F73BE1193F324
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  android_studio/LightweightViewer.exe
- Size 212KB
- SHA256 433487d0a135d5cf066bad35f4a92b45fe2549c2469a882dc9e557c1e1fe00c5
- MD5 93c13212f78aaabb52cf3e478cd2366b
- SHA1 ff8197c83bb50405792d3a29fcfd8dde62447a55
- SHA512 511d262f19cf4326275652353d52762c990dfd9bd0964fc8fadfb2dda7fe901422712bb609fb0d27cf0c4bb29195e203d688e83730a16faa4d57fba6c7cdad70
- SSDEEP 1536:lxEaFoBhPRO45Q7BcfPqiv1KLaeCzuRemga9HXmIrjws+na5WC:lOaeTOeQ+3qiv1KLFA6XinjC
- TLSH
  T190241717AAEC3CDAC13992B8B77783C1D72EEC8547A1D28F52D045918A3E5977A363C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  android_studio/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll
- Size 596KB
- SHA256 9af007ae922ceff72ab325ab1f0e007b022768647164e1b7a843f758c7ce3d76
- MD5 0c406e34adf29010fb8029d75294f2fd
- SHA1 8f8eeb0575c505bcacaeabfaa59b472a8f40d51d
- SHA512 865dc281f0ffcec99a3727687dc2435d6d7b997d780e9e5efd575b1710a997b15e659d0d2d298f9df5638cba7ba2403609494fcf52617aba17016ba7fd0d8dbb
- SSDEEP 12288:kOmNAmdeVH9Mwe9Ek/7jY4hOTBPyt9Ga:knAmdcMj9Ek/7jYSOT8v
- TLSH
  T123D47C56B7A402B9E577D138C6834B5AEAB27811572093CF03A897AB1F137E11B7F360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  android_studio/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll
- Size 7.5MB
- SHA256 86a5a4de6bcd74a637d63c96d822dc989d4ffaed6ef1c15c0e6e1f528ae6708f
- MD5 5b72826511cd04dd9fe787cfbe2d76a9
- SHA1 3d49cbf8b8741376cac41819bb5fad7ed63de924
- SHA512 eca8906c22f7c10c0d6dafd8566c62f934a206a665044a2501bfdda6caff741a6e9b440e25c4f9066f6979d146b1e3d0670d818d82e1c5d76df9c5765be22622
- SSDEEP 98304:r1JKQuu+DfvOtBQkSMDu0moP74cJGOlwo:r1JKQurDnOtykNBP7vJGOlw
- TLSH
  T183767C5E92660068C8ABC23DCB676B73D375700443306EDB46905F6AAF23AE5537E7C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  android_studio/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  android_studio/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  android_studio/MonoBleedingEdge/etc/mono/4.5/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  android_studio/UnityCrashHandler64.exe
- Size 1.5MB
- SHA256 043996479f30c535c580c4286d517400ce8408ec9862fc86baced42c78c9d9c1
- MD5 d1a33b5a7ba02be0dc842d733b98acf8
- SHA1 91fb2f48daf351c70970264f14aeca94c38dd9b7
- SHA512 c79ced0a4a540452b94acf586d7184e1ba90d069e05fbf2724d216eb2a586ebdae013e19fc580d9d2f4b00c545b3a3ae249eb6efb9a1a8e53c56e0b9ea2e3239
- SSDEEP 12288:J/NwJLQR7EHx+MKliKXp1noJGu3cwLWAZ1AETT6XvhixIZYtqxz/yasN9tC/XEK8:OLVxx+PXpeLW61nfseXoxz/y/N9w/X/8
- TLSH
  T1E07549292D641DDCD426843ECB838A8EE2B1BD5A1F714BD717A17BA72E320D01E7B351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  android_studio/UnityPlayer.dll
- Size 34.2MB
- SHA256 a2022611884470ddab23927a3eb7bbaef3924c18972d30ba7b5330a8fd25bcc4
- MD5 ba608c76bd4496bdbcb212fb05902dfa
- SHA1 22b2af035723677b5504436d4bb24df396d66c09
- SHA512 0627a97236e9f375c0cbfb0d9df67587800e35ed3163d0c522557f170e4b4cca596cc781f40070c4eb97e13223533273a8a86fdd74813cb5d075c161d03e24d2
- SSDEEP 393216:NiZ2SGCdbTcHS1gbf4kYA5zOvX8xq2Z/r/IZYjgE6k09uzWvmu:N6If1iC/rIE6Bvmu
- TLSH
  T11D77AE56A2B841D8D47BC078D65BA91BFBB13449073096DB52E04AA86F33FF02A7F750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  android_studio/Watchdog.exe
- Size 8KB
- SHA256 52444c8251441632753e054ba6b9206d6a5f3fa67e20c5cadeef68bddc06c4fc
- MD5 f7b8e58559e7586013c1195cb8847cdf
- SHA1 1e88586fa3f447ef15b1dfcbad87e8a15d5510a7
- SHA512 4e83be6c710b737edbcc9874174808fb80bf8c1c2f57ee32abe0c57dbf0b0468f60303d462c66e300bf38f2ad3fe0066d7e63e67f6ee6aed364cfad05c48665d
- SSDEEP 192:3zpfycBZanBAKFwEiO1vU/2gw0spN8AELr:jpfycwBAKF5iO18+1Zp2hL
- TLSH
  T196F1F809A3DD8932DCBE0B3758B71B2013B8B3025DAB9F4E36D8D55E1E237801195BA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  android_studio/android-studio-quail1-windows.exe
- Size 652KB
- SHA256 e8f505dc6454797fdc52cf8935f4e9797799af3561f7b9983d5f3225bb8c9a6c
- MD5 b0c4d1e76a62c292e85f155a1e51c7e8
- SHA1 fdce7adb9f13ff79803503d2d1ad5e601fff00cb
- SHA512 50773d0f426ef77912f1c965f79b3ddb6bcc34bc13b1348fda99263f21401626870247cc8b510e59ef5ee2c8e2d1af55e92256179bbe568de45fc231d7aa72d5
- SSDEEP 3072:HwazAjvuMeUwZPRyYzK4mHcUIcLsk3sRSjRoP:QaMjvuUwZpzUhLsAYSjRo
- TLSH
  T1F0E46F86A150C8B8D8660A3DC07215F48E27AC7BDA5CD75BDAE27D213EB31C13D2693D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral23 behavioral24
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/Assembly-CSharp.dll
- Size 87KB
- SHA256 a2359c736dc1e65787d671c0336d1ade6abec85f3964ade2c8fb61d6ef03894f
- MD5 22161ab5d0e55fa6f284b715a1dbe556
- SHA1 cddffd1058abb2fca8afe9b6d7d6ffe4366b505c
- SHA512 4eec2be9427c7aa00710c11757d39c64866be6f74b730c61952d6a02c7ad56fc6c1d892bf48be791428b33404fe69777fc2ee55a896065c90bfc95e5b16bfe8f
- SSDEEP 1536:b2R1Rir9bNCODoh8DeUxAZxnb0SQwKbV+b3oDq4sD9pga7iD21ixZllqp9ObUeqy:b1DDxAQf/xvUy
- TLSH
  T1C593276037EC8636E1FF9BBB617606050375BE036632E78E5989A4DE09337D04A117BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/Mono.Security.dll
- Size 235KB
- SHA256 618009319dbf3ae374f9b5dc0d0522e1e1bdd172200c120a5471747b7991a584
- MD5 7def7ed5d6858fc30d186418769b3721
- SHA1 8d69bfbef1a2d90cc5745409d7a817ca6f72421d
- SHA512 e4327d25e1f6f5026c4d023639044c2416140128dcfa656ebf25bfc54d58a16bedb54eb86f11f975a121bbbf827f5782d2d99bf2650ff63195032d5a848f8937
- SSDEEP 6144:rUjTQ70cnf8MoVRxS9iJdBF119RJXG2yW+Q:qEiH119RJX53
- TLSH
  T12F344A1863F9531AF6EE8779D4B15019C3F4F50BB9AAEB4E5C8282AD1C027918C41BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.ComponentModel.Composition.dll
- Size 251KB
- SHA256 0c3e81771a5fe9657bea02887996de72606c3cb247e4fbe413f743f40e2af244
- MD5 40f620a74d28e56f8649a6d9bb25610a
- SHA1 300d4092035c43e0f43c2548bc58da93c0ba54f6
- SHA512 35df297a5c98a7f5e77c9b8eadeb55ad94e55c5e7a574889d6b9b8f86a4b4626d8d7ceb460bb9847e92b1535e6dfbeb65df443a0e0ab6e40b50dbffcda10a0d3
- SSDEEP 6144:tkwkYfxuS0ZNORl1X1XYZGFU+22kUgUlAwU5e81hXJXee4jsURlXXMAX8O33iEP3:tkwkYfx8ZNCxL
- TLSH
  T10A44281533FD0366EAEF0F78B5B480148BBAFA06B95AE71C2C8951FE091379499117B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  android_studio/android-studio-quail1-windows_Data/Managed/System.Configuration.dll
- Size 122KB
- SHA256 04907729e87a101e62d3a5c93cfa16688bee745d05440d6daa0c541964be27ab
- MD5 66df027efa647f9ee850c5c6906fac3a
- SHA1 e6c852bcf82cd3db7d6427dc84ff07d4b57f6fba
- SHA512 23560090376e4be8fff6d36e09133298c8a0d642b8665e68337aa7414f5e08541f823f44132b5d8a15a18bf148862f6296b8b8597e4b0e5fe935c7234311289e
- SSDEEP 3072:7GHTFkizuGCOE/htnREcacWown5WJGL0MIe4gNe:7GHT5+H/33vJm
- TLSH
  T125C3F92563EC872BE2EE177EF8B515110FF1FA0AA436D74C5D89B0ED1827B804662367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32