General
- Target pear.exe
- Size 916KB
- Sample260907-xrm9sseq9t
- SHA256 df6d0bd21c124a00510fe2ff5e4923b4f95b61edfbcd06bbef21ee21b33d629d
- MD5 3d9602a7401c71c9f4b56ddecbfb0dde
- SHA1 14da99d17a508327f673790dd3b01379f1626e4b
- SHA512 7cdab031f5ff3a2fea05ea5db0ec7116c54c5f395204a50816c4f8f212626bfc82287c0a0e084a6b583c8e0ff284ed357e2ea82fdaddecc50335423d85ece726
- SSDEEP 24576:SZvZ9kcWXOzLgDfXlrWMM13Zaj3smvNSxXaJg7YJQqRvLu84RaBbk:8vWfXlqMM+jVvNkK2qVZNBw
- TLSH T15715CF09E60305F6D12392B149CFD7BB9254BB1982636ABFFF4ECE05F632701286519B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
pear.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
pear.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target pear.exe
- Size 916KB
- SHA256 df6d0bd21c124a00510fe2ff5e4923b4f95b61edfbcd06bbef21ee21b33d629d
- MD5 3d9602a7401c71c9f4b56ddecbfb0dde
- SHA1 14da99d17a508327f673790dd3b01379f1626e4b
- SHA512 7cdab031f5ff3a2fea05ea5db0ec7116c54c5f395204a50816c4f8f212626bfc82287c0a0e084a6b583c8e0ff284ed357e2ea82fdaddecc50335423d85ece726
- SSDEEP 24576:SZvZ9kcWXOzLgDfXlrWMM13Zaj3smvNSxXaJg7YJQqRvLu84RaBbk:8vWfXlqMM+jVvNkK2qVZNBw
- TLSH T15715CF09E60305F6D12392B149CFD7BB9254BB1982636ABFFF4ECE05F632701286519B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Deletes itself
-
Executes dropped EXE