General
- Target Penumbra.loader.exe
- Size 187KB
- Sample260909-sx1d4axejf
- SHA256 e4247c7339c87f70726e28cbb049d60f1141284afa1aec1c80827175ada9aaf5
- MD5 b94cb1e3fcc43b43799c7c4104f9fe29
- SHA1 0386c4114321c5d2985bd5ea74f83b41e186d7f9
- SHA512 49bdc6472650be0fec76a447ffc988298c96fac57e3f8344ffa1db5313490eff8aef789c6391a56cd03b579234aab37acf6a734dc6cb6f309b336a8f1e62fd92
- SSDEEP 3072:poXiZ9UsXQl1Dwu+ooIVe7YZHBpRXy201gv+iSUuNwNn/ek:poXiZg3DZoIk7iw3+lGwN/e
- TLSH T1FF146D15B6A500FAE2778678C9521902EB737C564770EADF13900AB69F337D09E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Penumbra.loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Penumbra.loader.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Penumbra.loader.exe
- Size 187KB
- SHA256 e4247c7339c87f70726e28cbb049d60f1141284afa1aec1c80827175ada9aaf5
- MD5 b94cb1e3fcc43b43799c7c4104f9fe29
- SHA1 0386c4114321c5d2985bd5ea74f83b41e186d7f9
- SHA512 49bdc6472650be0fec76a447ffc988298c96fac57e3f8344ffa1db5313490eff8aef789c6391a56cd03b579234aab37acf6a734dc6cb6f309b336a8f1e62fd92
- SSDEEP 3072:poXiZ9UsXQl1Dwu+ooIVe7YZHBpRXy201gv+iSUuNwNn/ek:poXiZg3DZoIk7iw3+lGwN/e
- TLSH T1FF146D15B6A500FAE2778678C9521902EB737C564770EADF13900AB69F337D09E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.