General
- Target Spongebob.exe
- Size 5.0MB
- Sample260825-srns4sbm41
- SHA256 fbffe597bdf8401fb4b01e55fde7443a583da16d77721ca8ad35f530a407675b
- MD5 4dd46e3e4c7dae7f6c658670bfc57fe0
- SHA1 4b385eddb740c5d7a89c6abdba029c6dffb19bba
- SHA512 b2894e897a2e669b296dc43dc18d3d8918adb75e54b86e04e2ed4f3814fda80e7c027ac86acd38da42a252c10fd83d6ce533c45c0a0b82e39086d67823cbf249
- SSDEEP 98304:7xOw7tlWmKoQZznTjr5zs1J9iaYV3rFP5MKcJzdciQZuqo82VhV/92+lnwIyg:7xOw7Dh1QZbT/5eiUKcJ4sRDVvhln
- TLSH T15F36339275D986A4E1315B7AE4873EFB2721BC274223C40AB5D43C767CBBA11903F26D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Spongebob.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Spongebob.exe
- Size 5.0MB
- SHA256 fbffe597bdf8401fb4b01e55fde7443a583da16d77721ca8ad35f530a407675b
- MD5 4dd46e3e4c7dae7f6c658670bfc57fe0
- SHA1 4b385eddb740c5d7a89c6abdba029c6dffb19bba
- SHA512 b2894e897a2e669b296dc43dc18d3d8918adb75e54b86e04e2ed4f3814fda80e7c027ac86acd38da42a252c10fd83d6ce533c45c0a0b82e39086d67823cbf249
- SSDEEP 98304:7xOw7tlWmKoQZznTjr5zs1J9iaYV3rFP5MKcJzdciQZuqo82VhV/92+lnwIyg:7xOw7Dh1QZbT/5eiUKcJ4sRDVvhln
- TLSH T15F36339275D986A4E1315B7AE4873EFB2721BC274223C40AB5D43C767CBBA11903F26D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger