General
- Target Allstar Vision.exe
- Size 301.0MB
- Sample260910-btrt4stbmg
- SHA256 c3b1f1fdba466f0530e8dc89a8f2e75e2b350531b960ea48287832a909024e30
- MD5 dbf3cea4135fe1c2783564c05d2bcc26
- SHA1 acc0087b4dd8709079a30b034dc443193ad5a16d
- SHA512 b2c82add96b1d2369519c7a67eea40b2dfa7976f1d7539f3feb4ff042af39917ed2a83dbbd1469b6264e3cf3225f4d77eb9458f2bd5f1aefc62680363ffd374a
- SSDEEP 6291456:e6IdtTdjY2uexvjSLfh4G+nBbuk+wjwZOqtGm0ApKXfhpWuRuvIRCgr6ls:BILThYUpSL5kgSjIB+vRuw1n
- TLSH T1FAE833B1BBA41732D192B534F0D4D550B6263064FB7746EF1A7A220A0BC3452AFBE277
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Allstar Vision.exe
Resource
win10ltsc2021-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
Bestscripts_Modern_Full.pyc
Resource
win10ltsc2021-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Allstar Vision.exe
- Size 301.0MB
- SHA256 c3b1f1fdba466f0530e8dc89a8f2e75e2b350531b960ea48287832a909024e30
- MD5 dbf3cea4135fe1c2783564c05d2bcc26
- SHA1 acc0087b4dd8709079a30b034dc443193ad5a16d
- SHA512 b2c82add96b1d2369519c7a67eea40b2dfa7976f1d7539f3feb4ff042af39917ed2a83dbbd1469b6264e3cf3225f4d77eb9458f2bd5f1aefc62680363ffd374a
- SSDEEP 6291456:e6IdtTdjY2uexvjSLfh4G+nBbuk+wjwZOqtGm0ApKXfhpWuRuvIRCgr6ls:BILThYUpSL5kgSjIB+vRuw1n
- TLSH T1FAE833B1BBA41732D192B534F0D4D550B6263064FB7746EF1A7A220A0BC3452AFBE277
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
- Target Bestscripts_Modern_Full.pyc
- Size 218KB
- SHA256 00e1cca1cc39d16ae2d4b9306aa95d77283a3d969878cc816cd8ff3697f3be27
- MD5 1e230c6ed7be507d3398f44c01f2c79e
- SHA1 ff2bbe2836351364b6bbfe4f1b5a360fe110025f
- SHA512 aaef92d95d2bc1b3cc3b833686d7987387d9b82e1a6bfbd4e21a316a486f25bb9a37a290943cb69518c9da2e0baed8a4510692c1b77452193043cb236994d0f7
- SSDEEP 3072:Q3t/ZioyDg9NEBYFfx+I1I1YATzSjNduQermTXuc:UREUb+F1YyQcI
- TLSH T1AD24B149BB62C037FD9AB8B51926279FF3259476B610CB1730BF8068BE475B49C520CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10