General
- Target SacredStep_v3.exe
- Size 484KB
- Sample260905-qqlagseb49
- SHA256 14b5dd95adc937a34a7018b5bb8cc20d09b691a476fc8f8860923e3d3c7a3b55
- MD5 632984d0b42a7b5f66d94e00e0063bf4
- SHA1 8639132b7f18514a261f42b50db9bd60c4a05465
- SHA512 1c3d1b70cdbefdd8c5b709a7810da54293b08a485ced71ba840439199549c8769de24b07592878136379c60580469ff8bc7421468e0f8103b962ab14529fe179
- SSDEEP 12288:iGm0OrOUVAVWiKL6f8QtrUZRv3PupMbkm54iw:iGmgZKqrUXubm5o
- TLSH T10BB4011BB2A531F9D4A7953989611906E73678361B309FDF03A053AA3F332D18E3A771
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SacredStep_v3.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
SacredStep_v3.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target SacredStep_v3.exe
- Size 484KB
- SHA256 14b5dd95adc937a34a7018b5bb8cc20d09b691a476fc8f8860923e3d3c7a3b55
- MD5 632984d0b42a7b5f66d94e00e0063bf4
- SHA1 8639132b7f18514a261f42b50db9bd60c4a05465
- SHA512 1c3d1b70cdbefdd8c5b709a7810da54293b08a485ced71ba840439199549c8769de24b07592878136379c60580469ff8bc7421468e0f8103b962ab14529fe179
- SSDEEP 12288:iGm0OrOUVAVWiKL6f8QtrUZRv3PupMbkm54iw:iGmgZKqrUXubm5o
- TLSH T10BB4011BB2A531F9D4A7953989611906E73678361B309FDF03A053AA3F332D18E3A771
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger