41b5636d352b8b70a63bb4a96163215f9987c7d65641c2b7bc1907c51aea80c3

Sharing

Copy URL Twitter E-mail

General

Target
self-leak-main.zip
Size 1.5MB
Sample260827-188tls1drd
SHA256 41b5636d352b8b70a63bb4a96163215f9987c7d65641c2b7bc1907c51aea80c3
MD5 aea2984d24be3002e2ddf37c6133e503
SHA1 bdf08d7bc9df35dc69f859498dfb4e850bb681b9
SHA512 fbb0cfd2956648d0052f3f1915a8e02c7adcbbdb20c998546b8c4be18732e54eb2de1475c0a979705d0d173546194b0d4afe51ea2ae0b4b6f324404076cf7c65
SSDEEP 24576:sTRlGgHg1VYshGZtR1cAXSnNhjZPR2CrMsHWYwPeqmXEnW+NV97lpUdi:ig61ZXfUNhFFrMnYFNEW2V9xpUdi
TLSH
T13C753374924E2E43F56FABB20B72906BEB498DD35DA500389C71D1A4C0CD789F623B9D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  self-leak-main/Main.exe
- Size 785KB
- SHA256 eaac64c113ebaba1fae924ad1b6239a44c8806bf2b85d8dc11a27ad65a981cc1
- MD5 bca6478b230b6920fe79b97a3066e835
- SHA1 f61e771c53c63f35f5a2b416c260c74d29329adf
- SHA512 463f16b737768ac2bb285efc09e69781132e95c234e2eab37eb98be797606e45d1dbb38df3a6ef55144f4f7e1b08a213768e915b7d967b8c90bd03b216a07ff7
- SSDEEP 12288:/AstffLBk3Q45wU0/St0Z4j9lAx5ylTxEIyTXnxYV:4s9uQ45oyj9lE5yFuTXmV
- TLSH
  T1CB058E6A66AC01F8E0B7D17989964907F7B27845137197CF43A087AB2F276E05F7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
  execution
behavioral1
- Target
  self-leak-main/index.html
- Size 360B
- SHA256 492db78732ee04bb805266d9e2169cc5a75ee89abfe70d6f0fb64388911b1d38
- MD5 b38d69096686cceb2eac29a25703298c
- SHA1 ac0499f68cbcdf6c45e12a86d01a05d64f089242
- SHA512 bacf321ece0d9d7962b9206dfc5266f8515a23f9bee942f88876b8ff3adef3a89dc8774641637dfd0a91d72a8fb88317fa477970a250dd5d05d38515dd326aa4
- TLSH
  T1A9E0C082C4F0CD05622046746ED1F1084E85C2C797846C0436CA60764FC1B91CED72DC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral2
- Target
  self-leak-main/libcurl.dll
- Size 1.2MB
- SHA256 d9ae2c2b325d110505f27a670298fa76684b33fbe48cf034bbcf34d6d6e37737
- MD5 2f339932f1a57c4a33f3555e7ebe0966
- SHA1 c1267093da3844c357d5292b1a713e3387c22b90
- SHA512 ae5ebc3f9b6d44dc15c24c3249d3dbc4001eae0cc13e1e65e3c75fb0804f1b91b2567ea53bf822872ff948e2d2d0042c69366b955b4f6e3ecb29a75efcce9746
- SSDEEP 24576:Ml6dL4E0nUsEa4MQxrXaSU7bz1IBEKhf0Jw8vTW:MlYE1UvatTHfK
- TLSH
  T11145F106B7A501F9C5BBD139C9175F1AEAB238464320978F17ED46AA1F237E0693F720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  self-leak-main/src/assets/react.svg
- Size 4KB
- SHA256 35ef61ed53b323ae94a16a8ec659b3d0af3880698791133f23b084085ab1c2e5
- MD5 f0402b67b6ce880f65666bb49e841696
- SHA1 f505ddc8ebe56bdc51efb721ef04923a8d3068dd
- SHA512 3cff237554fd440398906ee1c04a1085e1ecf0250837df4eebd4308d64acafa97b9af65e35ce7fd8912e28005c35ffdc0584bd6dd7b0453a5a05e4bcf61c2754
- SSDEEP 96:+aViMtAUYXcSHRHFP2UUfgo+jQUpdHyArL/GGtN3g2GwOg:Ji68bHobUvHyArnQzw/
- TLSH
  T19E81B5DFDF7D51FCC58B0716AA210861671E20BE3E73C768826F9AA16983C4CD6478C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral4
- Target
  self-leak-main/src/assets/vite.svg
- Size 8KB
- SHA256 5be21acd42eb7b896e517f4e0f0f11eb5c5d9e54fbbcebe9453f033008fcca6f
- MD5 9960a24288958394ac50e57ff638b036
- SHA1 f08775d18b2161f769267bdc0ebdbcf7aa632099
- SHA512 8ebaf18ea472ff6461b79ee62cc1e060effb146c283db941cee66b94e4e259130bb3e48198c1b3666c36ec8f146f2fffbdf6ccbc6d901506b0c73739d95d0a2b
- SSDEEP 96:A0BVphOpCZ7z2BrpUppRGJ9KwT9lSTSySiSiSPShSRSkSs3vSsSasSFsSGlRS70D:AAZdGj7v3xUDWy
- TLSH
  T1A40222E5E1F9B85DB6550538FBD398DB6026A08AC612438EB47F36300237EA3E97D524
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5
- Target
  self-leak-main/src/components/Toast.tsx
- Size 1KB
- SHA256 a46ffb535c7867bd2662a3fde61b4615ed664f10c4fef2694808359e2a50e904
- MD5 05ccd8e737b5e29189296309a4bd5389
- SHA1 d89cc10212045ba71d16a63ef7bd006d698cab25
- SHA512 695abc09e89b660c72ebfb93109509be4bba0a5f2d5a2bdf5e6e5ae2370669986ed71191ffb74fa760d267af7fb819b44a0a354b589b1a865dc0f35754c3fe00
- TLSH
  T1E531E316A1F245086E53D8F27F67942B1B3512133AC9E57436AC129A2FCA714A0F73D8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  self-leak-main/src/lib/lua.tsx
- Size 1KB
- SHA256 22c8a24d621a891e4aa0b15990f561d2afa4074632030c3154b5f772d1ce3729
- MD5 5fcc25e85653641f29560ec125165df0
- SHA1 3f825fe78f6ad25f87d00d331cbb2bb420a95eb2
- SHA512 85ef5af5c15269315a2fcf056478649054f990b190fc9a017f31d3c274f642f204b4e79ddc618877acf823b4fd61d367ac4c2e785d923427e2a0545a211f4bb2
- TLSH
  T1D831013031AA0A2700B7E4E53E870A59AA891412B108BC6D7B2D46601FDF92CA531F9C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7
- Target
  self-leak-main/src/pages/ExecutorPage.tsx
- Size 6KB
- SHA256 c5d90d363fc0f524e9b2ad3d42f5258f3d90bc1cef4451b789fe95abcbf25e1f
- MD5 0251404d64f37a3ff7659532e6eb0bde
- SHA1 50ad327923b58d872675b190e862263e36d0e0ec
- SHA512 592a0de6151bf1173cdcc0394e126440dfa611c96d4cfc9a9d61d10a542f0e99bb16831b0a4898b06d10fd6c25752dd51dbf53d9951cada17d67470d4975fe65
- SSDEEP 192:Epy6gSXYFEGKYufjGKwLfDfDYpKN2zBX2zI2zs2zv2zJ:Epy6gSoupX
- TLSH
  T190D16457F2F31DB10453823A8A9BC127B93E8083AF1B6C6CB29C57910F9D42552EB6DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8