General
- Target 94fdf3a5270ed4899048a7f303a0deb1137ead6d1d22aec252b509ad8f98fb4a
- Size 8.3MB
- Sample260916-taepjsbe83
- SHA256 94fdf3a5270ed4899048a7f303a0deb1137ead6d1d22aec252b509ad8f98fb4a
- MD5 e2f774b15a85c98a78e162617b3b85aa
- SHA1 483c58dca09636c458896fb7b7afbe75300cc441
- SHA512 97de2d0b8c1addd640b136fecdf84f5773f3e683eca56b29dc3f2a9dbb7ada71c7ad332c21f90b1d122d3d2d3d4e4ada301e3f77d690232c424a1580da4d7f0c
- SSDEEP 98304:DuLUz+7O7GTXLfJBcNOdXvG3hvspHoqjcj3l2QMPX9wFbs2dQWoLuPXz07Lm2v7m:DVz3KX7QOxOwpgj3l2adLoq/ggA2TJp
- TLSH T171963305BBFD3051D5B71BB5B8F9925300A6BB78D87A83BF4610A49F0874EA185F072B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
94fdf3a5270ed4899048a7f303a0deb1137ead6d1d22aec252b509ad8f98fb4a.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 94fdf3a5270ed4899048a7f303a0deb1137ead6d1d22aec252b509ad8f98fb4a
- Size 8.3MB
- SHA256 94fdf3a5270ed4899048a7f303a0deb1137ead6d1d22aec252b509ad8f98fb4a
- MD5 e2f774b15a85c98a78e162617b3b85aa
- SHA1 483c58dca09636c458896fb7b7afbe75300cc441
- SHA512 97de2d0b8c1addd640b136fecdf84f5773f3e683eca56b29dc3f2a9dbb7ada71c7ad332c21f90b1d122d3d2d3d4e4ada301e3f77d690232c424a1580da4d7f0c
- SSDEEP 98304:DuLUz+7O7GTXLfJBcNOdXvG3hvspHoqjcj3l2QMPX9wFbs2dQWoLuPXz07Lm2v7m:DVz3KX7QOxOwpgj3l2adLoq/ggA2TJp
- TLSH T171963305BBFD3051D5B71BB5B8F9925300A6BB78D87A83BF4610A49F0874EA185F072B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Uses the VBS compiler for execution
-
Adds Run key to start application
-
Suspicious use of SetThreadContext