General
- Target Reactor.exe
- Size 13.3MB
- Sample260823-tm7abshn91
- SHA256 fa0a32d408a8df70ec44f3d2374b058f57b86ff49b8068b8c68f8505d3463970
- MD5 bd73df4cf427511993075f7a16e037a5
- SHA1 63f116641b0655f53e93d62ae559d510ed5af134
- SHA512 49ad63e65e1f6a454778c904727c948969145eb09457105093af463d933413a7d30437051c7ddb8ded0b46d38b2018a1a78c83af582ab6775bef870057a9dfc3
- SSDEEP 393216:xfuP82nPJiP63TKZqkoPrSz4rkZD1K1fU:xqPIPgTxkqrV6YN
- TLSH T1B7E63364890802CDCD1B0FBD798992ED5D5A2ECE0B04D7D6A8F4B07F68F77D4949AE08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Reactor.exe
Resource
win10v2004-20260513-en
4 signatures
300 seconds
Behavioral task
behavioral2
Sample
Reactor.exe
Resource
win11ltsc2024-20260709-en
4 signatures
300 seconds
Malware Config
Targets
-
- Target Reactor.exe
- Size 13.3MB
- SHA256 fa0a32d408a8df70ec44f3d2374b058f57b86ff49b8068b8c68f8505d3463970
- MD5 bd73df4cf427511993075f7a16e037a5
- SHA1 63f116641b0655f53e93d62ae559d510ed5af134
- SHA512 49ad63e65e1f6a454778c904727c948969145eb09457105093af463d933413a7d30437051c7ddb8ded0b46d38b2018a1a78c83af582ab6775bef870057a9dfc3
- SSDEEP 393216:xfuP82nPJiP63TKZqkoPrSz4rkZD1K1fU:xqPIPgTxkqrV6YN
- TLSH T1B7E63364890802CDCD1B0FBD798992ED5D5A2ECE0B04D7D6A8F4B07F68F77D4949AE08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Suspicious use of NtSetInformationThreadHideFromDebugger