General
- Target invoice and packing list.exe
- Size 1.0MB
- Sample260831-pdcbdatxds
- SHA256 fb0889110aec73085c455f345f4f920d68aec7ae70f84867c57c9ca0e49b9564
- MD5 07f50d7334f97c8322d3b1a457b3347c
- SHA1 d76dd8084c5d023a6c0fd9a0867e19058d95ca8c
- SHA512 bbeb5b57719fb8d6c8870246bbfa8d06836e188b35e7c0f642770b7bc48a3df6cf0e67049d9bc1c9fd0b3f59a364d9a370ea6b328b851afa96db6c9ef6a5fb15
- SSDEEP 12288:StpI2Sx1Ti8Wc/VYhzjP2QNO66in2AMhApzP6vaiARO7bL4e7QXl6o:StpdYocNYtfO66i2NhQzi5IO7bL4
- TLSH T10735DF1523D89F58E9BF9739593555144BF3BD069E32D3EE3E8C2CD93A31A408A22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
invoice and packing list.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
invoice and packing list.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target invoice and packing list.exe
- Size 1.0MB
- SHA256 fb0889110aec73085c455f345f4f920d68aec7ae70f84867c57c9ca0e49b9564
- MD5 07f50d7334f97c8322d3b1a457b3347c
- SHA1 d76dd8084c5d023a6c0fd9a0867e19058d95ca8c
- SHA512 bbeb5b57719fb8d6c8870246bbfa8d06836e188b35e7c0f642770b7bc48a3df6cf0e67049d9bc1c9fd0b3f59a364d9a370ea6b328b851afa96db6c9ef6a5fb15
- SSDEEP 12288:StpI2Sx1Ti8Wc/VYhzjP2QNO66in2AMhApzP6vaiARO7bL4e7QXl6o:StpdYocNYtfO66i2NhQzi5IO7bL4
- TLSH T10735DF1523D89F58E9BF9739593555144BF3BD069E32D3EE3E8C2CD93A31A408A22723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Suspicious use of SetThreadContext