General
- Target FreeSideload.vmp.exe
- Size 20.9MB
- Sample260917-dpbnfagg62
- SHA256 5900f924c1efa3ebca24f9887cda1acb5907e5fff852ab2314da648a54395cd8
- MD5 8a4bc979c1192ec6a1a242eed26b3ce0
- SHA1 74e49a5a2c6be5ad1a4404724d4240aafddbec65
- SHA512 fea40f32f88bc5c8288038d0498b105f5d5219ff678502a28328ad104bd7a5040d22adf57271f797d4561c8ba2f6f012e21dcd3a37aa2c6a4644a2a3581b211e
- SSDEEP 393216:a5AskpTJM5xV1VK+DEHjqp1QQrU1S5JULjXgRYKXB:a57STKV7KTHGU4JULsaK
- TLSH T1942723D696D487F8C3824749A14B038BE2C2668BDBEF5D2935CA5C027290D9B170BF77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FreeSideload.vmp.exe
Resource
win11-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
FreeSideload.vmp.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target FreeSideload.vmp.exe
- Size 20.9MB
- SHA256 5900f924c1efa3ebca24f9887cda1acb5907e5fff852ab2314da648a54395cd8
- MD5 8a4bc979c1192ec6a1a242eed26b3ce0
- SHA1 74e49a5a2c6be5ad1a4404724d4240aafddbec65
- SHA512 fea40f32f88bc5c8288038d0498b105f5d5219ff678502a28328ad104bd7a5040d22adf57271f797d4561c8ba2f6f012e21dcd3a37aa2c6a4644a2a3581b211e
- SSDEEP 393216:a5AskpTJM5xV1VK+DEHjqp1QQrU1S5JULjXgRYKXB:a57STKV7KTHGU4JULsaK
- TLSH T1942723D696D487F8C3824749A14B038BE2C2668BDBEF5D2935CA5C027290D9B170BF77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext