General
- Target 1aaa2e2e1a8183a03c5f908d201054b6669efb94df58fee86703fc80a5aa7bb5
- Size 78KB
- Sample260826-js7syavckf
- SHA256 1aaa2e2e1a8183a03c5f908d201054b6669efb94df58fee86703fc80a5aa7bb5
- MD5 2c61981125cf6603e038258d276c7f4f
- SHA1 fe10f935afd8448ebb5c00dc398776bfb804605c
- SHA512 017d41ce7d595ce9313727210058c655a332a73fcf6bc3b32881c576bd06505c502f66726af2a112efc0202722e4df5e019498485e9f32c32d495b18ef54f9f3
- SSDEEP 1536:/M6Z95EKQeEjzCvV2IHdETncyMcEwXOS2XNtU:jaeEjz4V2WdteXOSWNtU
- TLSH T199734A25B7A1C532E45216309868CBB69B7FBC3157B495CBB7D80B3B1EA03C05E39366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
1aaa2e2e1a8183a03c5f908d201054b6669efb94df58fee86703fc80a5aa7bb5.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
1aaa2e2e1a8183a03c5f908d201054b6669efb94df58fee86703fc80a5aa7bb5.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 1aaa2e2e1a8183a03c5f908d201054b6669efb94df58fee86703fc80a5aa7bb5
- Size 78KB
- SHA256 1aaa2e2e1a8183a03c5f908d201054b6669efb94df58fee86703fc80a5aa7bb5
- MD5 2c61981125cf6603e038258d276c7f4f
- SHA1 fe10f935afd8448ebb5c00dc398776bfb804605c
- SHA512 017d41ce7d595ce9313727210058c655a332a73fcf6bc3b32881c576bd06505c502f66726af2a112efc0202722e4df5e019498485e9f32c32d495b18ef54f9f3
- SSDEEP 1536:/M6Z95EKQeEjzCvV2IHdETncyMcEwXOS2XNtU:jaeEjz4V2WdteXOSWNtU
- TLSH T199734A25B7A1C532E45216309868CBB69B7FBC3157B495CBB7D80B3B1EA03C05E39366
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects LittleDaemon payload
-
Family: LittleDaemon
LittleDaemon is the first stage used to deploy the SlowStepper backdoor via DaemonicLogistics.
-
Deletes itself
-
Executes dropped EXE