General
- Target e2a4f14efc6f4900618bdf33c9e0650654ddea4a7c992677d40a0c3aec2f622e.zip
- Size 10KB
- Sample260906-w315csx1ct
- SHA256 424f2750c19bab2de6dfdd0a5b2bdfd85d2a2894bacedeb9c6be5b24241da55d
- MD5 b818af53f56c88255299f45b24543a3f
- SHA1 c18cf15cc00faa6d38d334fe624dec5baa1a990f
- SHA512 d89f78d89828053f67f4f3b62882292819d77d2930584256021097f7ea49ab92109eac5cc1aa4bffd086ddfbb6ca1af64899f33e5cffaca97bdde15c5ce717b4
- SSDEEP 192:TkJBxQeH4yCVeKWXL6XJu3RUU8mdznQocQ6VehSEvztsZBKdHCGCi:+ya4yCVHQO5u3eU8gzQY6VexhsZBiCi
- TLSH T19D22D00E76E86AFEE5C8561F037C68E315EFBD112439C86D5716712FF1638D6A403848
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
e2a4f14efc6f4900618bdf33c9e0650654ddea4a7c992677d40a0c3aec2f622e.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
e2a4f14efc6f4900618bdf33c9e0650654ddea4a7c992677d40a0c3aec2f622e.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target e2a4f14efc6f4900618bdf33c9e0650654ddea4a7c992677d40a0c3aec2f622e
- Size 21KB
- SHA256 e2a4f14efc6f4900618bdf33c9e0650654ddea4a7c992677d40a0c3aec2f622e
- MD5 110204f185ff21bc67a04bfefc4ee032
- SHA1 2ace5da03e10f0e7872e4918494bef88e1002bdb
- SHA512 1b752fc5229945b27f9418b0e9de5186f5dd5f80505a1637ec6ce4d2b5533178cd7fe75625cb0a3a851e89119cea7cb92631ce6e2c00a530a44b33eff2d9a8bc
- SSDEEP 384:/1r5gthFKXHDKPrSzBHZQ5XxRwXAzuEPeQ7PkwP4wacEa63lu:AhFKzKYBHZQ5D77PkwQwbt63lu
- TLSH T1B1A22B5EA68948DDE136E13CC9B7624BE2B2B50E2722EBCF075015130D3B7D86E3B585
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Detect suspicious telegram bot
Detect suspicious telegram bot.