General
- Target Proton_Test.zip
- Size 121.5MB
- Sample260823-vldgasydjb
- SHA256 cb9740eb204054c5cd57c0b680418b630bcbda240e9d49a0ee06b0fecdf69ab3
- MD5 efb8a1d15b739599f0ef915764d13592
- SHA1 0631aeb3cb861321e43b6d130bfa5e6d73bb8305
- SHA512 721da2b3b52daef5feda8385fcdc1d1fe94a16556fdb253ba538544f628ecf6e8ba23c36e07bf1eb8c1c366927c5e85cb7fd15e5a4fb49a5d408394c35c6a4ee
- SSDEEP 3145728:GiY35I1GaD/8Rjj64GA8rm2xsy9MQlD8lIHMmLO0BA6G:uIcaD/8Rjj6O8vMllIsmC0BK
- TLSH T18B5833BA11B2A9DE8E5840F1DBDAE03D74F76E1A473425E407CFB150625E502EB923BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Proton_Test.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Proton_Test.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
MusNotifyIcon.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
musnotifyicon.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
musnotifyicon.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Proton_Test.zip
- Size 121.5MB
- SHA256 cb9740eb204054c5cd57c0b680418b630bcbda240e9d49a0ee06b0fecdf69ab3
- MD5 efb8a1d15b739599f0ef915764d13592
- SHA1 0631aeb3cb861321e43b6d130bfa5e6d73bb8305
- SHA512 721da2b3b52daef5feda8385fcdc1d1fe94a16556fdb253ba538544f628ecf6e8ba23c36e07bf1eb8c1c366927c5e85cb7fd15e5a4fb49a5d408394c35c6a4ee
- SSDEEP 3145728:GiY35I1GaD/8Rjj64GA8rm2xsy9MQlD8lIHMmLO0BA6G:uIcaD/8Rjj6O8vMllIsmC0BK
- TLSH T18B5833BA11B2A9DE8E5840F1DBDAE03D74F76E1A473425E407CFB150625E502EB923BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target MusNotifyIcon.exe
- Size 634KB
- SHA256 563bab739d6fd0ff89edf310514efff078ee35ba0ec5a79fae1c19da63f73f92
- MD5 d02c94b455edc410a9ffd16de0cf8fda
- SHA1 2fba0bcc09c9af10e27c8385ac7b7caa70a5be3d
- SHA512 89723a358730716de27368ba8dfec17defc18425b3c0f86d43013beda694f1642e4e22ce69438987975441396626fa7107a83f6c247eca52701f7ca268a35c36
- SSDEEP 6144:oBKyrAszlmjN0rTLAgQ/BHoX31/QfCn/+nlXwEYZDRi+dR:oYyhlmjNw/MW3BEEDt3
- TLSH T1EDD4A42976988089D0799B788D96C055DFB23C5A1B0145CBFDB8772EEE3EAF55C3C220
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target musnotifyicon.dll
- Size 161.4MB
- SHA256 50d23bd7dc7938cf2b364319793b92c1fc475c57a2a60ee9104ed065af61bea8
- MD5 2bb1a71701db7cf0e54c5d28d6761e84
- SHA1 26b599e8945c182f0aa41920ec0b35c492a93c24
- SHA512 089034005adc2be794a3409e89cef685aaccf4e1fc0a3bde22f899faf06b597e19c0c4ddc6c3c3b6fd12dbf2b2c44e2887f83da90eae1aa46172ce438470980c
- SSDEEP 49152:FwDItVyVN98YAC4TEiJUgidUZQ32zYH2v95h+OntCT8ntF75EtnHJoGp6UQQ7C2t:
- TLSH T1C68833105E697EBE466C833870BF2F0F2BE10F949448E5D792E565C7226FB810F1B869
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.