Overview
overview
8Static
static
3PopDrop_v2...op.exe
windows10-2004-x64
1PopDrop_v2...op.exe
windows11-ltsc_2024-x64
1PopDrop_v2...ew.exe
windows10-2004-x64
1PopDrop_v2...ew.exe
windows11-ltsc_2024-x64
1PopDrop_v2...er.exe
windows10-2004-x64
1PopDrop_v2...er.exe
windows11-ltsc_2024-x64
1PopDrop_v2...ew.exe
windows10-2004-x64
3PopDrop_v2...ew.exe
windows11-ltsc_2024-x64
3PopDrop_v2...er.exe
windows10-2004-x64
3PopDrop_v2...er.exe
windows11-ltsc_2024-x64
3PopDrop_v2...um.ps1
windows10-2004-x64
8PopDrop_v2...um.ps1
windows11-ltsc_2024-x64
8General
- Target 2dad59897cb8e5daa69f9eeb9cd65bd393c63a12dba44792d9ab805d6927ae46
- Size 2.3MB
- Sample260825-ljbegsgn2s
- SHA256 2dad59897cb8e5daa69f9eeb9cd65bd393c63a12dba44792d9ab805d6927ae46
- MD5 bdc21cb082184550585b33c36db810d1
- SHA1 89b7421f0657a4ba404ddde4ca6e3035d079d7cc
- SHA512 49dd62a50afccc7923d995778e87b931445310653b78fd48f7e75d2a7c0c6e667706828608fc7b414c86a2b6a95e86d755a0242ace636ac3869ec2bc774e8aee
- SSDEEP 49152:zl9InTxML2EYnBRdc5Rkcb7/+p0T8avz3qwRATk3Is17NRqjN:zKaLBKROBTFVz1qTk3tTqR
- TLSH T1FCB53390737BB2F5DBBB62B240BA3564E123B34DD7C1429796481B04697C42CEBD9F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
PopDrop_v2.0.0/PopDrop.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
PopDrop_v2.0.0/PopDrop.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
PopDrop_v2.0.0/native/bin/x64/PopDropPreview.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
PopDrop_v2.0.0/native/bin/x64/PopDropPreview.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
PopDrop_v2.0.0/native/bin/x64/PopDropTransfer.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
PopDrop_v2.0.0/native/bin/x64/PopDropTransfer.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral7
Sample
PopDrop_v2.0.0/native/bin/x86/PopDropPreview.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
PopDrop_v2.0.0/native/bin/x86/PopDropPreview.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
PopDrop_v2.0.0/native/bin/x86/PopDropTransfer.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
PopDrop_v2.0.0/native/bin/x86/PopDropTransfer.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
PopDrop_v2.0.0/native/install-pdfium.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
PopDrop_v2.0.0/native/install-pdfium.ps1
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target PopDrop_v2.0.0/PopDrop.exe
- Size 2.5MB
- SHA256 48f6e09c8d79d7abc7de60d8d37f4432ac4bb4ae41338f9dd9c91d0d1929d8d4
- MD5 e7bd75b69fcffcc4265e2b770156bb04
- SHA1 f92aab958d6afc68e9963a08c3f8c5cafa19b0a0
- SHA512 8609bcdde57eb6f1d06e22d791a1ef13db1e75c266669be0eee8938add78b788892c73e98ce4d4c4a552815892528e73b024bc8f226eb3714889bf46a73a139c
- SSDEEP 49152:hToMKvPQvOi8AmQNsrlLaZVhg6M6WvKATFPFrv6L3c7pQYC/ggUNiocEVCxZ9qEO:BmQ5hg6wvKWFVvj7pQggUSi
- TLSH T12AC59D4363CB85BDDBAB827CE5800A10EE39FCA9426D10D7944508CDB9BFE95457BF82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target PopDrop_v2.0.0/native/bin/x64/PopDropPreview.exe
- Size 233KB
- SHA256 11ecae7249a1b281d5ada4f756b0bffbeaa94b9138ab6f797618a5280be50816
- MD5 74cefcffcedbc9620a719b29189c938e
- SHA1 d95f4507c5698b1731aa576bff97eda01ad18e79
- SHA512 fd78d223a137e3cd29cd925a685d1e34193d020be34dc76f041993fc51a8fea20142a449084a0fce1dd863299e9eb356cbbbb3281bd16338bc1547ac8d36039e
- SSDEEP 6144:WDVJNNPRV/3/ONn+8kxFsX3B2q5Pi5HHKwGs1dEzxXAtC2:WDVRPjPORKHHKwGmZtR
- TLSH T16A345D06B6A90DFDE5BBC475CD424941EB737C4607A0D6DB079049AB8F276E09E3EB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target PopDrop_v2.0.0/native/bin/x64/PopDropTransfer.exe
- Size 418KB
- SHA256 0af25df35903595e4174adc7851d98a90164519024f90f62ecdfea38d0c54d68
- MD5 035aaa8f18f36cabd0232e00f9e8895e
- SHA1 ff51e20bffe25aa5e1901e05105c46fd68376f69
- SHA512 b72cf411804b843d5e047ff570e9e1704b6dba131ee95217ebc70b208b99b649a08d56f9377daebdae4489665e09cf487013cb278b06ed0e5a2ed36f18cc8e34
- SSDEEP 6144:dqaM/dR8Mb5bZHKNzSrC8tW0n4IiBHx1BkswrlqZsAHqmuAIOA50MO44:d2dR5b5bwOu8tW04f7zxzua6HO4
- TLSH T1FC945B16E79801FDE067C279CE938801EB76BC4903B1A6DF139456B60F676E48E3DB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target PopDrop_v2.0.0/native/bin/x86/PopDropPreview.exe
- Size 199KB
- SHA256 2170cde46bb37a8cfe43bf50501a35bd39ab25e9278b73408ebb1f023f1f4af8
- MD5 131cfb98fd0726416df8918134c9292b
- SHA1 d63946cb0a57e8497bc8018c6b2409c4e129a988
- SHA512 44b3561bf74a0ab721b080ca5cb27363e9382e94a60756737eff2ed7629dd906ea59bbf6fddd6f35b61121b19a761c801c527bc5321f97500e1f3e9f190b806a
- SSDEEP 3072:huFA8kPyrHcXeKVpnxseeH50fKaRXKYYpcY4rZI9GgKmMIED3oe/lMJI1FCDwPHR:ZyQVdxDhhYWrkBKDTL5/y9oOufDB
- TLSH T1D3144B21B9A2C133D2920AB059D4EFB6EA7D7D714FA174C773C01FAE49215C26B39E06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PopDrop_v2.0.0/native/bin/x86/PopDropTransfer.exe
- Size 350KB
- SHA256 77866b774cda3a4a029248e1e7ff77c20bc5ef54d1c9ac6b5ff45c75368a9a30
- MD5 73b0d6065398868c7f17423da3b45c7e
- SHA1 952822e07f09ec3d5fa479b6375ef09721f9588e
- SHA512 f6cd789b88fa1bebcfaad3ac8a8157a501d5ad048407c31ea05e6a1a390d337e342ebe539da6c6b9b566ea09f900e0807abeb0f172606300725453adee88a304
- SSDEEP 6144:eh68fplGAi2lV3N73ZsrvWGZaocgf3/h7fq7S+/KBm3DfOBMHMVex:eg8BllV97J8cgf3/Yd/g
- TLSH T1A7749E11FB46E033C49605709F69DBB68A7EE8700F6175DBB3C41ABA99606C1AB31F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PopDrop_v2.0.0/native/install-pdfium.ps1
- Size 9KB
- SHA256 8453ddea36fadc144ec2ad4b3eea2b8c1624162785a3d7ec2f4e5c7e2f20ad29
- MD5 473031894e2527af0e76db342a8ae6f1
- SHA1 ba537435969bf54bb4e6ca4791030b74938ac954
- SHA512 2a28518d32a57a87e0820a6d4988b4b788b33f8d8fcab1170478b7ce641867c5cc32408d03e2b47e7e2ea6e9ed0da6ff58c93c2bdfbf3140a0819626d4472699
- SSDEEP 192:UV6ESckP5iQecVyh6Bv3ackVqmNstt2c4qoQPyQn699ixfpQC3sw/Z2jrfQOJ3/O:UFcVk6pF4qkstt2cHVuix5cUT3tubc
- TLSH T1AA12A61934E526191A8B3A75A4FC0009325D909F940D8F587AEE92C8AFF5139CBF73E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.