General
- Target ColumbineRPG.zip
- Size 27.1MB
- Sample260828-x1zzyssenh
- SHA256 4b722ff914492c59eddd35b3467ed214c07bf8db2b3145d75eb45003bc7434e4
- MD5 5263454c56f862fbb0b215331e2ce6b3
- SHA1 8125886e69a28d625b51538b8cefdb75c0b98a71
- SHA512 f19c9bfba53d8154f192df0a32906f6972bef84f21ce6739b862bf888e11f60488f9ea421bd5ac7a979c60b210324636dd1e6b32e475e49e6b033393dabb546a
- SSDEEP 393216:NFrJbebx119OtDckHefcDAf0fLn7v354hPGUyyUfvxmAelabDBKrpqtXM00t1iol:vdsqOfVeL7fGhY3xjP8pCuT2+BD
- TLSH T1615733B32DD50579E75F0B708B3667CBDB504474620D9A722B7E243E6CEEB20C8A199C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
UNLHA32.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
UNLHA32.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Setup.exe
- Size 471KB
- SHA256 da7729c02d3a967d8e17a27545c0bf605869d4a4dc338fcb092291e798ce5309
- MD5 e3910b75e8419efff3c8094101103494
- SHA1 11b8fe107498e4cdfb2bd1d0141e23d78b308110
- SHA512 7fba9ae4f7199d561a5761b6f8718cc7ac28fa64ddf3062aeb2da54b138371dd507da3bbc48dad3dc53ecbb9db7f20472497e5e9faa9b996a211906d2a82236d
- SSDEEP 6144:16P5Glw0aMATY6vFnHyRyIzHSRciN16G52HahIrZy9PEF4Gtlc9AsXq:1u5GqBF0yuSRpNx2754G7cysXq
- TLSH T163A45C27F6C0A833C1223A789C4F97A4992AFE503E295D4767F91D4C5F3938279292C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target UNLHA32.DLL
- Size 232KB
- SHA256 1fda9015acbf708a170f3f0c6b5c5888832c5b9125da0803e598b237b5cbe424
- MD5 26a33bcbcb4b3b9230e3374d066c5186
- SHA1 e1f338ef9ae2e0d289f61956ece608ee56b16358
- SHA512 ba2323c1036039c2f6052382e017d492aa13c6f5cfe3019a7545e64395dce34ceceb224dad70cb3f223d0c631662ca652d3f7d46521c5e97c3b25ee9eb3d1f03
- SSDEEP 3072:KKt/T+RITiAWeVhGNvbly9P3pabzjglu6AxMghGDhXULgrNJU9HL24U1jKAK9:jq6TiAiNT4LGjJxx2Xwr24NAc
- TLSH T10434C0D13ADC84B1D9E3073D5450B77DA2AEBA7443F28283DB817EDC68219454B1E39E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10