General
- Target Loader.exe
- Size 6.1MB
- Sample260905-t2nrjaybnd
- SHA256 57fbce488bd29ac5d1dcf2bc0cb77758c737e8dfa25c0309972919bdcf8920b1
- MD5 577ab03dfa118f5dfbca85f2bf730144
- SHA1 b6a6baba01ff0ea0f652b9c27a272d672b712756
- SHA512 868315f5435f8a09ffe4b19a877b2bc2a4544a13c59d22c662e58cd669b8f0b481c525d2a8a48656d01b0af40409a345cce73b1581137b0e294d8c844de2eba4
- SSDEEP 98304:DwVk3IUX+EjLnZo/Y7mgTm05AwJHE6hD243WwYlZqL9P0FRwF:qk3VXhDmg7PAmkg2z/ZqL107wF
- TLSH T1C056BF42B39181E9C266D138CE82E767D3327C090F3156E736EC7A1A6F726D04E7AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Loader.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target Loader.exe
- Size 6.1MB
- SHA256 57fbce488bd29ac5d1dcf2bc0cb77758c737e8dfa25c0309972919bdcf8920b1
- MD5 577ab03dfa118f5dfbca85f2bf730144
- SHA1 b6a6baba01ff0ea0f652b9c27a272d672b712756
- SHA512 868315f5435f8a09ffe4b19a877b2bc2a4544a13c59d22c662e58cd669b8f0b481c525d2a8a48656d01b0af40409a345cce73b1581137b0e294d8c844de2eba4
- SSDEEP 98304:DwVk3IUX+EjLnZo/Y7mgTm05AwJHE6hD243WwYlZqL9P0FRwF:qk3VXhDmg7PAmkg2z/ZqL107wF
- TLSH T1C056BF42B39181E9C266D138CE82E767D3327C090F3156E736EC7A1A6F726D04E7AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger