General
- Target REDSHARK.exe
- Size 5.1MB
- Sample260825-ckhera1zcv
- SHA256 b43fe60b9653306791cc6db8e2f9aecf8b72b282b06cc6e20ca9f8cd43e0efd2
- MD5 dfc7a0e4d2844a2f340d0f13f4978d3b
- SHA1 305fe1b8d31e0a83b983acb77d6c270f8ce2141a
- SHA512 03097f4ee1ccdc19e6cc4542708c9f30fc45138c3394f8245614a2df24579c743f4572d8282c87fa331c113032824ae2c2d489d45a75ce8e36b1dc837a9e0317
- SSDEEP 49152:c+gOSLrrl9loQUixnsOBZT51onaCtsqFqOus7GpT+Vh0gs9615do4VKqY+ucurYq:c+an9gsO58zJ7W3UB
- TLSH T133467CB1629943DCD93ED0B89B56DE03FAB0740503319BEB16900A534AB7FE4AA7F711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
REDSHARK.exe
Resource
win10v2004-20260513-en
7 signatures
300 seconds
Malware Config
Targets
-
- Target REDSHARK.exe
- Size 5.1MB
- SHA256 b43fe60b9653306791cc6db8e2f9aecf8b72b282b06cc6e20ca9f8cd43e0efd2
- MD5 dfc7a0e4d2844a2f340d0f13f4978d3b
- SHA1 305fe1b8d31e0a83b983acb77d6c270f8ce2141a
- SHA512 03097f4ee1ccdc19e6cc4542708c9f30fc45138c3394f8245614a2df24579c743f4572d8282c87fa331c113032824ae2c2d489d45a75ce8e36b1dc837a9e0317
- SSDEEP 49152:c+gOSLrrl9loQUixnsOBZT51onaCtsqFqOus7GpT+Vh0gs9615do4VKqY+ucurYq:c+an9gsO58zJ7W3UB
- TLSH T133467CB1629943DCD93ED0B89B56DE03FAB0740503319BEB16900A534AB7FE4AA7F711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger