General
- Target potass.zip
- Size 11.2MB
- Sample261001-wdw44stdqg
- SHA256 d8a1b88b0767cea7716140ab0557f08a71d747b9955b71890b04aafdbfd42125
- MD5 1a0686ecc034f48ec1d658d150f9fbc4
- SHA1 166c6981faada0eaca51786931af67c9fa1a0f5a
- SHA512 4443d557a3fa2433a444c6eb3b7c8f9af6e0e2c916ad7bfdfe524c6c1ee9064a63c9d13ef380af5790ca7f16bafe765702ae4c0a338f3a548ab037da97e9bf22
- SSDEEP 196608:nGbZ1k7x2ezvI/rV2f+ug0+raKW9uOe68Y/X/wIOtPtDdjj6D0FBQjsYS6vO8YtH:GjwE/rqGraKW9uOe684pOZtPasYS6vd0
- TLSH T13EC633713FC59C1EFA48AD752B9A39A6E0C0CC08CA94F591987D5DE30B315F20B16BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
potass/Potassium.tunnel.exe
Resource
win10v2004-20260911-en
9 signatures
300 seconds
Behavioral task
behavioral2
Sample
potass/Potassium.tunnel.exe
Resource
win11ltsc2024-20260911-en
7 signatures
300 seconds
Malware Config
Targets
-
- Target potass/Potassium.tunnel.exe
- Size 25.4MB
- SHA256 8b0eb53ca98457dec118b0c9b0946eec96dd19dc6796d7bfb2774b0f4cb2097e
- MD5 50d645cf733d1d85c2499673f855bdeb
- SHA1 90bc2f85fe9cefd14ecbbfab3115bd93b78745af
- SHA512 d7cad9049692533866352fe2a691e685d066a80aac94d12b6171839f6346e655e8e6f0671ac0b3c9a9959511ed60321cc09ae4f499fd23e54c424844e1183c33
- SSDEEP 196608:JsqJtqlfcOnRXcd4pEBkvLSQxR5m0KJNTTH1/+30vVUkYHLHjL5HD:OlfznSd4pESvLSI9KfTXfYLHjNj
- TLSH T10B473A257B5A996CD05BC474838B4A729A7130CB0B35B9FF449492782F7EAF42F38358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks whether UAC is enabled