General
- Target 1ba2827fca6a62399d82c6beb644c34bc11c6251ea5c8e8dbae2f847c564b01f
- Size 14.0MB
- Sample260830-312fnsbm6z
- SHA256 1ba2827fca6a62399d82c6beb644c34bc11c6251ea5c8e8dbae2f847c564b01f
- MD5 8dc8854cb43e382787e07a1054bbd231
- SHA1 4bd9cb9befb04c527c5ba3366f27aac66823d69b
- SHA512 f1b67f29a9e232f5743d993fe7b55d1c2a67746c8c513a74d33ab63251a5918df4db4c954b4123bde8c8aa961242a0ca6883d5d9e6f4ed8b5ae41bb18b64c086
- SSDEEP 393216:50/zblTG+dmQoig7ln2TjybE3CcxDNoDb8ZPwTZX:50/zddmgg7QTjCp6Non8Z4TJ
- TLSH T112E633C4B611E5FF0A0EC9E79AE5C6C5786CE500F321E89EA84B9EDAC90802C5D35F75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Castle.Core.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Castle.Core.dll
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
NetworkWriter.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
NetworkWriter.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Castle.Core.dll
- Size 12.2MB
- SHA256 dafe2e7ef1ac036f68d22a9fc445a56822d71fd0feb8c4709baba54d9fb823bd
- MD5 d80f7c70feedf8c89e3ea4e695d8cbd5
- SHA1 f636d15b02d22006909a913fbc65f8094e144c31
- SHA512 440bf102c76e72103dcb11556818c3c302097109e66a8eab1c1323c1964b3f7bd5a15314d7888dc545e21edc78c9ca5fb4e801d319ad6fea7ea002ecede0d475
- SSDEEP 196608:bPSnk4f3OKORGQa1Db9S8HK1Jnzj//Zf9/kiOoMF:2nk4f3GCFb48oxz7/Zf9QNF
- TLSH T19BD6E02DB2250676D7677AE688E61487CA5C2261AF03538B371B47B91CB163F8F8131F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target NetworkWriter.exe
- Size 246KB
- SHA256 3d2b22b6bc51e0918263f4420e6bdf7d982d961b54176c470cac11841d1c9b33
- MD5 2d6ebd59b568586a8f1683b07de897e1
- SHA1 ca4af6cd9ebdcf9d29481be1a1229697cb56d54c
- SHA512 67d24d8b5bda715c6bc6c77d2dfa193d6bfca7480c2b46750d9e5b5171de5341fa64e0b02d797eca3839d1bd646d84f002ac654c8f5c0040469e8feb5d6c46d6
- SSDEEP 3072:6DEKKwBWmSEoRoocfZO8gQYiY35ePw2XpFU4rwOe1ZbZEFf02RFiZWr5MAh6i:UHK2W0u1EO80+RXf1102bio62j
- TLSH T17E345901A7EC0615F6FF0AB8B8B055158B76F867E866D75E388C61AC1F73740EA60363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger