General
- Target ORBIT + Phantom mw19.exe
- Size 17.0MB
- Sample260823-3ztpfabe82
- SHA256 742ac35201d479dd8cb1ba9b481bdd759b7711a36418e38b5b4841f33cb74f5c
- MD5 fb13c5e237a0e7571dcdfb77338696b4
- SHA1 5487962165557ba5b202bd53893e2da209c2a1f1
- SHA512 b7c26ba9fc7b25a917ed25405e01e4f866a415080fd1b48fd3da20e2d853f7c05a388ce1c1804a2018036e70145b0573f7c6b9f96b649f99897259afea2387a5
- SSDEEP 393216:0dOtKFTJ9SXINHz6wtJeedeSaPqQ7Wfl0O7G9e/jAXVd:0ogF19SXSWwtJeTbPHCfl00Gc0Xb
- TLSH T102073306B5C300FAC0DAC3B99232B03FB23D37A1952E7CA567E945111C53969DDFAE46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ORBIT + Phantom mw19.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
ORBIT + Phantom mw19.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ORBIT + Phantom mw19.exe
- Size 17.0MB
- SHA256 742ac35201d479dd8cb1ba9b481bdd759b7711a36418e38b5b4841f33cb74f5c
- MD5 fb13c5e237a0e7571dcdfb77338696b4
- SHA1 5487962165557ba5b202bd53893e2da209c2a1f1
- SHA512 b7c26ba9fc7b25a917ed25405e01e4f866a415080fd1b48fd3da20e2d853f7c05a388ce1c1804a2018036e70145b0573f7c6b9f96b649f99897259afea2387a5
- SSDEEP 393216:0dOtKFTJ9SXINHz6wtJeedeSaPqQ7Wfl0O7G9e/jAXVd:0ogF19SXSWwtJeTbPHCfl00Gc0Xb
- TLSH T102073306B5C300FAC0DAC3B99232B03FB23D37A1952E7CA567E945111C53969DDFAE46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Stops running service(s)
-
Suspicious use of NtSetInformationThreadHideFromDebugger