General
- Target Shrimpware.exe
- Size 2.3MB
- Sample260916-e9l6cazv4k
- SHA256 d421e44e4d3d19621afc8b21d728170a8f452acdc68554b0b1d166a8d451036a
- MD5 cdf34353ce91dba08fb7e1810251fa41
- SHA1 6d1d37f5e6e3f03a4387b719f118794e0cc123dc
- SHA512 dc9153092cf153e9e8f4ade4467d5b4581f8af439a1be0a6762653286f2478ec74f5913d5c0eb36ca3b009fa897c7d4329f0f76dd22570ee5efcab87e75aedb9
- SSDEEP 12288:ZPfRGvNDtxfQQ+sgO0xpUf+XApiaNsPWBybSNenkla6xYXuthiAczdXCLEOOTKIL:dRGvNtqQh0rAczqEOOTKI9ncXnC
- TLSH T19DB5094023244061C4B2367DE26FB91A6B7DB14F33E02BD712EDBB09D99B95CC2752E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Shrimpware.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Shrimpware.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Shrimpware.exe
- Size 2.3MB
- SHA256 d421e44e4d3d19621afc8b21d728170a8f452acdc68554b0b1d166a8d451036a
- MD5 cdf34353ce91dba08fb7e1810251fa41
- SHA1 6d1d37f5e6e3f03a4387b719f118794e0cc123dc
- SHA512 dc9153092cf153e9e8f4ade4467d5b4581f8af439a1be0a6762653286f2478ec74f5913d5c0eb36ca3b009fa897c7d4329f0f76dd22570ee5efcab87e75aedb9
- SSDEEP 12288:ZPfRGvNDtxfQQ+sgO0xpUf+XApiaNsPWBybSNenkla6xYXuthiAczdXCLEOOTKIL:dRGvNtqQh0rAczqEOOTKI9ncXnC
- TLSH T19DB5094023244061C4B2367DE26FB91A6B7DB14F33E02BD712EDBB09D99B95CC2752E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Executes dropped EXE