General
- Target MV 2.7.1 version-2366ba214ec740ca FIXED.zip
- Size 21.5MB
- Sample260930-vq5fkstenb
- SHA256 978bb18559b1602d798833ba4125e2615caed7880a1b84ce5e1ba88c34cb906f
- MD5 b983d0ba55561aacfd89b80c24de2981
- SHA1 ef0b289fa777c5e11b0024b9146fbd1b1435634c
- SHA512 9f6ee30149936d7f9fda65653e8a465d3b3670645b1c508a8a229e1b716322616aaad2a9fa23f793ddbf8d263f0fe412253647116a57bb7242cea883ad3377e6
- SSDEEP 393216:RkLRGR1N90trLGwvEAONHMHtHG44oTHQJ3ANyfY92diRyrEmgs:mVqqlvFOdMw6Hm3AsfY92diRQ
- TLSH T194373321C7C672ACC766B6FD867487C3480CBC969BB152A4944C61F941AE41BEECBC4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
eurotrucks2.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
eurotrucks2.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target eurotrucks2.exe
- Size 24.7MB
- SHA256 6986d9162e0c7ae490da4777b90bb021cbd61cbffe5ae37856021979b5edf5fd
- MD5 4316831af14181c4b902b4ab98bf7bbc
- SHA1 9b7991a668387433bde78329f53592e8c8e3d611
- SHA512 9ccd01ed36363e1ab1e392541b28cd06c60f20f5d4d1df2640eaea1233456c3beae370fa3f925e56ea39d784a2c6f3d51e1466397e9f6335dfa286989f2b936c
- SSDEEP 393216:B1ude8+WR1y5lrPinJfKkpcC+rz49fFS4u0nH0PavSKZRIs52bIxkY:B1t8+Wjc6zpT+f4WiHNvSKZRIk2bIx
- TLSH T1CD4723E769D522E5D393CE08D3CB238A83C271A6EAE78A1D39C664031571C93DB45D3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Detects references to legitimate web services potentially used as dead drop resolvers
Detects Telegram, Steam, and other legitimate web-service references that may be used to retrieve secondary C2 infrastructure.
-
Drops desktop.ini file(s)
-
Suspicious use of NtSetInformationThreadHideFromDebugger