General
- Target 0928bce3b377925eb6dec739c30cac7e764f77b4e5c777d30e1b591a61a1ab05.zip
- Size 8.1MB
- Sample260910-mm5cea1hje
- SHA256 3f3765e0ca996879abc9112eefb6c5828f400aa1bc03141201561da2894db4a9
- MD5 284986c09ae860748c1ff79e86b6c3dd
- SHA1 35f7463f48d802ea732b0248ce37896fd4fb283e
- SHA512 33831ed89a46e8ffb3c1f4bf29a34665b0fac22a718cf03dc0b76d0d4150d789e86a908b14c61b3ecf8ae10528188484b71b63aaab235a46fb4d9ae69ddaacf0
- SSDEEP 196608:5S/Rl6zfItyRuiquNxwRHRa7XVedlazxmJSBsYpRfh6FXnH4tr:5WX8fItOu9Yxwp8bVAUzcSsYpRJ6Fotr
- TLSH T1368633F694E1D47DA2347ABC52B3A2F5838F451DD0F6AA4C18CF90EEF85278469D6C10
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AA.25447132.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
AA.25447132.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Behavioral task
behavioral3
Sample
WebView2Loader.dll
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
WebView2Loader.dll
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target AA.25447132.EXE
- Size 5.0MB
- SHA256 a6b848f66451b954e6799648ec0da6573fc35e18ee8f00acd0b4ab2df840fbc8
- MD5 a5cac61444cda3be17ca2cc0ad4d6b54
- SHA1 329ed586d19f5a1226f84169f0c700eeed27edf1
- SHA512 d02137bbebcd77150919624fc2e1207daf5233a2c5ebdf9ee86b11fc52065e3585d2c78f4ceb4907fb1aef4d8cf937f3a240aae5e5a44e51e4fe04a535ecc913
- SSDEEP 98304:uqjiIn2U7rm0yfujS5zgXMuNE4OiZrq1DfPHNADtV6v+FdgB:3jiIn2U7rm0ZS58NE4O7NADtV6v+FdM
- TLSH T1C3368D45EEAC40DCD4B690F98937571BEEB2BC41532247DB0365BA9E6F337910E2E221
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target WebView2Loader.dll
- Size 8.2MB
- SHA256 acf3f7e6041a30df678c8a5a55bd27775a9d23d117b674645de508f165e8baa1
- MD5 b1e9b446ad671c4f8e2045ddf3db7805
- SHA1 2a73613487fdb1e4008a90ee3f16122a27c1e33e
- SHA512 4522fa95f8748bb1bd3247a67b31e930f85134be2828b77f2ee3ae6092f0963908e5b1582a8583b5d7457f627bac155e25a63e2494238ae9a63ab0a2fae99961
- SSDEEP 98304:tdVuncuwNPglgTTSSHDKnMwCk1XSmXi9kprdrbdFpYAS3Q0i/V0Fn5AO31GflCdx:ewxj3HmnM/k1XBi2pJJY7i/V6bYOhl
- TLSH T17896D0466EE8C0B5C4F6D03DC62B4A6BD3F578020631C6DF57919A0A2F337629E6B325
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Tasks
static1
Score
5/10
behavioral1
defense_evasiondiscoveryexecutionpersistencespywarestealertrojan
Score
4/10
behavioral2
discoveryexecutionpersistencespywarestealer
Score
4/10
behavioral3
defense_evasionpersistencespywarestealertrojan
Score
8/10
behavioral4
defense_evasionpersistencespywarestealertrojan
Score
8/10