General
- Target Cellik 4.exe
- Size 28.2MB
- Sample261002-dprdwstsct
- SHA256 476d7fefbc5f078494d77bd393df9a97b4268faaf4908156d85c0155f8a1e00c
- MD5 42c0c78a69c68b16cffefde618c0eaaf
- SHA1 1997f44ba749fc341a49187a7b738f572c5e582d
- SHA512 dec21f5297389d8cf60105e3a65a9ad0ad2f654c4d05218c0381fa2c39c5780795e556068c5d68d707150f4f9b03bd5e5834f3129f65b42f5b47af1a455cb53c
- SSDEEP 786432:flwQIYoeQ7MYeOUsZ9Ia4RZhsN+X8Q9toyK7PeAqIp9:NwQrmeOUsZ2hKQp9297PeDIb
- TLSH T1265723066103523ADC4E2679A40DF36006165E8AB2BFCDC8E6547F5BD394DCCBED3AA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Cellik 4.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Cellik 4.exe
- Size 28.2MB
- SHA256 476d7fefbc5f078494d77bd393df9a97b4268faaf4908156d85c0155f8a1e00c
- MD5 42c0c78a69c68b16cffefde618c0eaaf
- SHA1 1997f44ba749fc341a49187a7b738f572c5e582d
- SHA512 dec21f5297389d8cf60105e3a65a9ad0ad2f654c4d05218c0381fa2c39c5780795e556068c5d68d707150f4f9b03bd5e5834f3129f65b42f5b47af1a455cb53c
- SSDEEP 786432:flwQIYoeQ7MYeOUsZ9Ia4RZhsN+X8Q9toyK7PeAqIp9:NwQrmeOUsZ2hKQp9297PeDIb
- TLSH T1265723066103523ADC4E2679A40DF36006165E8AB2BFCDC8E6547F5BD394DCCBED3AA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects BTMOB RAT
-
Suspicious use of NtSetInformationThreadHideFromDebugger