General
- Target NaviSetupTool.zip
- Size 11.5MB
- Sample260913-ws12lstwe1
- SHA256 20244234c71e7530b0b4880387c9c50a9af49fed56d484a7c0d66bde29bfa155
- MD5 526b30092b979ba70cd84d4fd2a20d81
- SHA1 bd4ead4da757e75baa4be1611b4524264affcf51
- SHA512 b22b514bc4cc770a68662e2e0e0ddf55eff06711ec26e434c7bc612afd8679a41790af6774db339eb8f945a4db1aa187b9e9fe20a883bbddff9ffcbed9ac48f5
- SSDEEP 196608:JV2uNOs5mpaodmZ+yOj6G+Q1zVaEfLZxmqTdpikzj0CwlLmjXxz0JEMiE4dLjzbI:JV2uEsAmZ+yTmJayZxmqDnClLm1EEMqk
- TLSH T169C63340A9EA2F8BF120D73586898C75E9897CCC951E97806FA6070771D78D24FF88B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
NaviSetupTool.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
auth\R2j512zbUZ2n.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
vcruntime140.dll
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
version.dll
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target NaviSetupTool.exe
- Size 4.5MB
- SHA256 66a1f6ccc9f869945bec8149f1af5ce5bb587d3d25c8008cfdc0bf3c0cebf9c2
- MD5 42fe4a56c232d4f65bfa7ad9eab99812
- SHA1 ff382fff460371f167ae09d2f2cf54d7d6264a0b
- SHA512 3694acd3980705493876209de679cd316f596f5255be2a0eb23971dbef18a8c54adb08f7dad42217ca855768910bba8d6f1d9d69f74429f2a64af9f9fc29c1c6
- SSDEEP 98304:+bwdaDFrhpwBP/OlsLzFmNfW6FJKxxfZA4AnyxpELRSKE+R1Y:+bUEFHGpELcoR1Y
- TLSH T131269DC6BF88F5E0C4A48834B916D5BDC6737C7A8A11468732D7FB1F2A37180552B92B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target auth\R2j512zbUZ2n
- Size 190.3MB
- SHA256 847db95726bfa153dd6e2f324aa8109ce442eb1fcd67fce1ce318a595639ab40
- MD5 37dce47f37e812a9096d98eb92e47bc3
- SHA1 145aa57c7813a31c3208d2a6e449bfb263853c06
- SHA512 cb98b86fd81eda3dc9876a71b166cd68020e0136b01a98bf6b72d12626c451b964f448adb1ad002d171445c61fbc0f102ede297375a88f702b5d8df762b02c47
- SSDEEP 393216:hMq9ExYvinquRATfDGuqnddTSLkNYAyl:5vilKTiLfTSL7Ayl
- TLSH T1F898D08DD1F4B1BCC97DD03C4C041C16C379386A6B23476A2A56CDD969B31B92BFAB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target vcruntime140.dll
- Size 116KB
- SHA256 f843cd00d9aff9a902dd7c98d6137639a10bd84904d81a085c28a3b29f8223c1
- MD5 699dd61122d91e80abdfcc396ce0ec10
- SHA1 7b23a6562e78e1d4be2a16fc7044bdcea724855e
- SHA512 2517e52f7f03580afd8f928c767d264033a191e831a78eed454ea35c9514c0f0df127f49a306088d766908af7880f713f5009c31ce6b0b1e4d0b67e49447bfff
- SSDEEP 1536:KqvQFDdwFBHKaPX8YKpWgeQqbekRG7MP4ddbsecbWcmpCGa3QFzFtjXzp:KqvQFDUXqWn7CkRG7YecbWb9a3kDX9
- TLSH T16AC37C4573A802B7D62EC274C1E25E46EB75B5418770ABCF03B589AA0F13BE1AE3D345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target version.dll
- Size 124KB
- SHA256 00f6b47ed70472f6b7cf95b8cdeb33d254906d780148df205320a0f7d25298e4
- MD5 410af86d672a4886ff7ecae3c8c0c5a7
- SHA1 e2308e96a4f97972dc3f382b8e23f776e5206aac
- SHA512 96695a111688b87f6c7073878a0f80190ca2fc1b5ec7b91f9e8f10cc2aae9a3b9b5a34596242dd9210f409502aa927f77f9a3404c354f8e95de5034800fb83a1
- SSDEEP 3072:PArsEFFJFC9pVpcGgD4H3zFOSwCYnn6iouckVPxIiTON4F:PArsqF7cpMdDC3JO6A
- TLSH T1D2C34B1BB6B5507BE26A8938C4530A05DF72BC918BA0ABDF07900DDA1E637D49F3DB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE