General
- Target Levoria Executor.exe
- Size 114.2MB
- Sample260913-d12c8see66
- SHA256 e158243898fc083678877cd300967dcbbbe275c648afaf4e332c05a50555c577
- MD5 e40026938bd691d80e80321286c914fd
- SHA1 608a860f2ff164f7c4732a2e3e6e65703bbac3a3
- SHA512 952dd31f740638f88f6ba1521a97321a6a3873896c58cdb16258d3d4b0132d9197fd61971ba01a896b054499578fd70d3d86b9328b730483ea4b5acfcb73f0c2
- SSDEEP 3145728:PQLbqKuiFc+KkpJuZD4h13M1rSfuoLEqO4MojUP4hOK+:IZBO+7pJkDW1c1Si8jUP4hO5
- TLSH T1E24833F6D2D1CEBEC2A2E37E26C5EA03FE5DA9C50C0C853149B8A907509DDC4DB9A4C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Levoria Executor.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Velorix.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
resources/app.asar.unpacked/decode-worker.js
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
resources/guard/guard.jar
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target Levoria Executor.exe
- Size 114.2MB
- SHA256 e158243898fc083678877cd300967dcbbbe275c648afaf4e332c05a50555c577
- MD5 e40026938bd691d80e80321286c914fd
- SHA1 608a860f2ff164f7c4732a2e3e6e65703bbac3a3
- SHA512 952dd31f740638f88f6ba1521a97321a6a3873896c58cdb16258d3d4b0132d9197fd61971ba01a896b054499578fd70d3d86b9328b730483ea4b5acfcb73f0c2
- SSDEEP 3145728:PQLbqKuiFc+KkpJuZD4h13M1rSfuoLEqO4MojUP4hOK+:IZBO+7pJkDW1c1Si8jUP4hO5
- TLSH T1E24833F6D2D1CEBEC2A2E37E26C5EA03FE5DA9C50C0C853149B8A907509DDC4DB9A4C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
- Target Velorix.exe
- Size 168.6MB
- SHA256 67dc2a7036860a68e5312c212c31b8772ac463ed0289fcc44897867f55075e89
- MD5 fbe2635ee2c0e774247127b54371b343
- SHA1 e1b2434bc210206da2e8f6f442c11de19b87a11d
- SHA512 2832fd5f238aa5d2b7c4ce3bfc81c71a3ea764ca596cc360fbd08270e1a885a9b5a2c6d21912d902997f70c675e6212cb0c755ddd6890becf22959205d9c06c6
- SSDEEP 1572864:vOhiqBPiJU33xaD1gWcdcMPEDCNCgDX0Bf+NNvTPQYhl49RIuKj53fHcTLNKJF96:DgmeNxNNZxqV
- TLSH T1E2887B13F29651D8F09DD1B18B578236EA72B8460738A6DF2754172A2F77FE02B39B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target resources/app.asar.unpacked/decode-worker.js
- Size 971B
- SHA256 46d47d1aad66aaf82c5318cc98d6c1ecee46fcaa38762bf1ceb3af7f940e95c2
- MD5 d7f3208fcb9457dce743b0e5319276e3
- SHA1 b1a158f20a3cb545060b93b154ccda18a67e072f
- SHA512 a2cd72120aa38b50a145789e8a61ee38aad562125aad7ee636f736261fa3cd4ef3d543b9c455d7ef0cad5e53e6eb350831654f8733f59e2b973576b6f3e4cd03
- TLSH T149119B8706724270AAE732D79B976B052622F0477220D864BA6CD34A0FD2A4598177FC
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/guard/guard.jar
- Size 4KB
- SHA256 3ced6dfb040fa4e15f8eb6414480f2f2f87d7dfaccc98e0bf832835386ea121e
- MD5 5a94de796adc90935529a3676852a6e2
- SHA1 46128cdd5bc5ebdd6d5a70f744c68f2b21398cdb
- SHA512 84277672b04f9f4a3630211f0c3c005e23119cb6db8d0a874c280aa017ca7263d5e10ec24e85e0a1d9c83e68d8c67314a132d89d60afeece6113542eaa1cec6b
- SSDEEP 96:wEEGz14MlhyXFWBzns11PBUbtD03CzuB8cPdfxmobblsKLXC9Lkm:wEEu4bXFWBmvutDuxZpR6IXDm
- TLSH T1CAA16F70ECB6887CD52DCDB8CA6937077E11966077298C174F8928651B31D5CEE132E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10