General
- Target 3.0.7 patched.zip
- Size 51.4MB
- Sample260901-y4zzss1vbv
- SHA256 f40b548f79aadf3ab0b8c3b5f30b8a3994a5a6e3a43ef721c480553e2fa7d587
- MD5 985b0c5e392f0616d2f254399c276cb3
- SHA1 2931f2d91b4c05910acb47cb952929c8679fe803
- SHA512 f4b93e561d78121668fd038c1946c99c8c656f264013c5da7583a921a16eae0b49fa38b5bab3977026220dc6668c77fcb7515f22da9d56aebbc582ad07df931c
- SSDEEP 786432:m7S8+oavf6N68/Hd2oK3wu0ow0hrTSwpOcdMTUAfiWKQKz6vD/8ty/+k1lrNqGUS:m7rC6ZYq4DtTSlGYUAfij4L8tyGkHh
- TLSH T1F0C733D5C06772EB72B4F063D6FEAC65E76EE6E681F88C2ED0855BAD58019C40E430B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3.0.7 patched/PandaLib_PUSL.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
3.0.7 patched/PandaLib_PUSL.dll
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
3.0.7 patched/Spotify.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
3.0.7 patched/Spotify.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
3.0.7 patched/libsodium.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
3.0.7 patched/libsodium.dll
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 3.0.7 patched/PandaLib_PUSL.dll
- Size 222KB
- SHA256 a2455b3c315e91ebea57ee09e521ff260a86b18ce6951c91511e7390d047dc56
- MD5 6751e5b5c023028a6b2db5261ca129f4
- SHA1 3f43bf84134c8d143d818af5dd570e07fc5e287a
- SHA512 6947096f52e92496d662d895ca8aab978cd623933fb7f6acf7a45a368bfb4fdcc227e1c5deaa1e7912c3241737bdab0f9e6cc8f64dcbd011534bea96718d0b45
- SSDEEP 3072:CtufsKHHjBt77TCIWtHcGd1xn6ZnoyfrSr28XyfQ:CtuZVx7qFP6ZnoilfQ
- TLSH T1F5244B2766450D7CE1E7C2BDCE83C942EB72784A07B2DACF07D01AA25E676D09D3D612
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target 3.0.7 patched/Spotify.exe
- Size 51.9MB
- SHA256 40a172ac844feec63a6c12e78a6d7383ce49c4e49f52d5f7b73d757fd2553bfb
- MD5 b11bf54234b15058f78a925111ed9180
- SHA1 1b02692f63964ac2967a0827a94abbdcf127ca84
- SHA512 0e249f52a6271a2f950c51f2942b72b0810e6f06ac6a03efc10f4c5b8f315081f84fc32b74992a7a06d0e9cae17c93425df14a0ffa3c6de017e9b0d91a5b7036
- SSDEEP 786432:ghVngaNBa5YgHnzW8a5K+aGa4zllo2j0EF252AF++SG+B+RN3WnYTMep1nDAgWv:gfNalC8QTxloFgO2AF+5wfWnYQe/2
- TLSH T153C733DA6095A37CD027C03CC47BFD797AB6956D8EF0482A79CA76F423A1804BD91F12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target 3.0.7 patched/libsodium.dll
- Size 398KB
- SHA256 cf020c31eb50f0979b040e2711adc59a50ac1a4873ab6bbae44e3f0a1869c5e9
- MD5 9c4a85fcc720d7096a70ebdd8749fafd
- SHA1 33cdebf66633659d244c497d0a4f6566ce47d55d
- SHA512 2bcc864ae72549254939b3a4211d4e1c99266d67b7ceab8aa0af4437749c5f87fb8c53b6b72b33addca29ec234817a1b2c5cee0ac6d63281670099a2b8717591
- SSDEEP 6144:YBEqroRVp5phWv9sPP7IU8G9ecuXGH/ILwMl/WOmdbV50DErzH8:YvILnhWmPPFQcUYAsMlOOEMD4
- TLSH T155946C5EFEF68DD4C9B7E07C817E9227FA51380C83706AE7139285942A533E5923DB42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10