General
- Target d2845ecd-da82-432b-8fce-50c3b5b2140c.zip
- Size 34.7MB
- Sample260903-ppnhsas1dz
- SHA256 a57774077f6bb305e6e225dde0859f0f331c85b38aa737b129298f8a0049cf0d
- MD5 148375938a249e4c5b7d250131050df4
- SHA1 cf927ac2b4b30e5106e4ef53583b132cbdf79731
- SHA512 601202b0be3001b8de25b87b491c59d3fea8870d57fea8af517e1af4598c78336bf05e42357745a95366331031b57a843342e4c15c528bbe7fc6d4e04dd3e76a
- SSDEEP 786432:AQHpWRbE0UEys2tMhJdTy+wLY4KPbPW0Z3sgIXWbGIg5nExHCva8t7w9CpP4B:AzRbE/s8mJdT6LE+m3wRnn1t7w0pQ
- TLSH T1828733C660A301B8E461186F0EEB9C3DFB376764D75BCEA7367D2502A049293E15BD38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
MuseHub.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
MuseHub.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target MuseHub.exe
- Size 35.1MB
- SHA256 c9c12347ebb3ed1b3893cbc43b49852ad8b86d8d24bc316a1294c70aa46d9d5a
- MD5 fc1ff9ac132c4faf753dc9739f957c0f
- SHA1 b897555bba49be4e030d6683b048eb84538aeb02
- SHA512 fbe50c59adac1860fc53308ff5d01383dc7e043f8306e1a8f1443208ac597e487fb2b1674e1946be0c1126899eca9b3d87ffaf0d0085f617d7d568cafa68ab92
- SSDEEP 786432:XLUL5QcaeYUzkxnhvE66RKzSbJyOqRnAe0Zm5Mokx30fXObEhHropS91o:XIL5Q6Ye8nhv8R/lenuT3PeHroY9
- TLSH T13187330AA3E541F9E072967D09670506FF3379059B36CBDF13A8941A2E277D2963BF20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger