General
- Target 6eq5gvOfRvNmCi54.exe
- Size 2.8MB
- Sample260922-pls9vsec89
- SHA256 a2fa794887ecb96a4b40389fe152e52707c021c86f63c4430557e7c286840b96
- MD5 9561f827804a198e3be1b9342c660981
- SHA1 35a5b41d23418e5eec809fd8a95f31e67f8fbd79
- SHA512 3f79fbc263697d2b8b7db5537e05269c22d38f695327e230d7a73e65b2b10df1acb5c356d78132c284ed2ed95c2d943eb7966c4de143060ce3bca7413ad15264
- SSDEEP 49152:9nmowHHEkCHgoKojU6yKqyBJyvsHXV119h06fbJ9V4f1t6vJfC5FfD8Q:NhwqgoKYPjyoX/R08J9VGS6jfD8Q
- TLSH T18BD52296B9F229B0D836CBB38F86F07DB0293B9907700D9BB2CD59048C636556D76378
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6eq5gvOfRvNmCi54.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
6eq5gvOfRvNmCi54.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 6eq5gvOfRvNmCi54.exe
- Size 2.8MB
- SHA256 a2fa794887ecb96a4b40389fe152e52707c021c86f63c4430557e7c286840b96
- MD5 9561f827804a198e3be1b9342c660981
- SHA1 35a5b41d23418e5eec809fd8a95f31e67f8fbd79
- SHA512 3f79fbc263697d2b8b7db5537e05269c22d38f695327e230d7a73e65b2b10df1acb5c356d78132c284ed2ed95c2d943eb7966c4de143060ce3bca7413ad15264
- SSDEEP 49152:9nmowHHEkCHgoKojU6yKqyBJyvsHXV119h06fbJ9V4f1t6vJfC5FfD8Q:NhwqgoKYPjyoX/R08J9VGS6jfD8Q
- TLSH T18BD52296B9F229B0D836CBB38F86F07DB0293B9907700D9BB2CD59048C636556D76378
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Registers new Windows logon scripts automatically executed at logon.