General
- Target astral_crack.zip
- Size 18.3MB
- Sample260831-h1pfwsxapf
- SHA256 520ea471bcd55807cfc9941cc7c8c3963beb8d2000ba1052a3a0e2a88a2ad65a
- MD5 90f01cb2531ee4280f7d14396bd21238
- SHA1 7b15e15b7c386ee42d3b186b1b8b51b1422a460b
- SHA512 0812bbbf9b23d643dc4c11077ac6f65b5bee74d7509185458ae18580903ef97cf6509a9712382bd71058388044a23f9023d45e8b9759b22501d16c05e11a72f2
- SSDEEP 393216:MeUWg4WLNXAy1aurpnQzYOovpvhW7NFZiTPV2Vgnr9eInKH0fMGaTK:f45Qy1DdnQzoKNFZixOm40BaTK
- TLSH T1A11733F5C18D919EB9695758CB3FE060C19327EE117E0F82A093D95C6DF4B24A8087EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
astral.exe
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
astral_crack.exe
Resource
win10ltsc2021-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral3
Sample
hook.dll
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target astral.exe
- Size 19.7MB
- SHA256 5c5c71db655fb8e2dff7c99d5cc7061d9a998b3cfbe73034a51cb9fe11fba900
- MD5 fac7dc78dd5a592d9333e84bf2ff66f7
- SHA1 bbbbd1189583dcb3d3582f82ea9764049dcb66b7
- SHA512 057cfbe514620c355243e8367f70ca09e37f96e22b1fb778263cf58da638485782fd891c6cc9df2e01a915f678b32cd8a5252640e2242fdcf0448d5651d102a0
- SSDEEP 393216:6SCx3RL1HoYLx/z4JaqqNX1hQzfXv2qNJEJovPSP4irxVm:ExBxIYLNz4xqmfXv2oSIINe
- TLSH T16C2723A790CA66E8CBC207B4664950CE75C0656D84FD6E583EC68C03DDADEBF044DFA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target astral_crack.exe
- Size 285KB
- SHA256 9f070b6a25d28d883a5ff92085b45b50a91d301f3c405042b29981c98cb61d4b
- MD5 ec5fa7fcc7d87d0b1bc1fbfa1ead2d4c
- SHA1 7e848ea02a27c19f9d5a9b8574ce9c91c5e11b1d
- SHA512 ea95470aa9f18f3277bef2001f9f777358b52a3b617c981a650901712c0a9a934dfe5e013aa13b15b95b1753fd8efc7759d8df2ff77551c749ec9e6df4c9b34d
- SSDEEP 6144:U4JcWjIoO2oOetyzXrs5FVqZtAvFySSnf/ew/QSWVWtzR4wy:+Mzc2lJWwzR4
- TLSH T1A1541A02E1DAA4B9D72A8AB8D3819A71C934783D8724DDEF17604D621E335D36FB5B03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target hook.dll
- Size 131KB
- SHA256 2fc0291c6d8ee5893c185b3ae97091622751fdabff5624f7710c317769d18777
- MD5 cfaa2d6910a33653f4f2a5a0a5364197
- SHA1 9ba8fd18c4ff2b1261dbfdb38e683ecf8b92ae58
- SHA512 30f089df7121a57736ba1b136e72b29f489f85c3d6c3a844169859d41e1d7c5316c5d4767bb93a20dab7fee6dc0857a9c0faeb74861b154ba208fd7d2bad9835
- SSDEEP 3072:q+FL8O7Z5Nu99ZmBLCT6i/LslxCjkGlpu4vOgHeid2bPfTWu8qq5cyCsn:qAL8yXu99ZmBLCT6iDslxCpu4O8nIPfy
- TLSH T143D33A07B2E5107BE1368278C1E78E55E775B81547209FEF07A086261E237D25E3AF63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10