Desktop (1).rar
- SHA256 2bad3df182a616c0d93fdc35ad1a629ef76101cf2222294070ba84a4ee52ecb2
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
3.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral4
Sample
3.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral5
Sample
q.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral6
Sample
q.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
General
- Target Desktop (1).rar
- Size 23KB
- Sample261014-prs62sc16w
- SHA256 2bad3df182a616c0d93fdc35ad1a629ef76101cf2222294070ba84a4ee52ecb2
- MD5 077e92a46471ebbb0ff45aa529631ab8
- SHA1 99a67d542b70eef2376f58defde3ddc9d9274b13
- SHA512 5ae053e9c8b3614eecb5cbd1782ae863f5599e8c54a18a85bdecc4ff0031aec73fe080515f527f31c7b22cbf1886f4b290b5c7d89bede30debbcc496f286bad6
- SSDEEP 384:fyRF/ujVxjaCBtP3lu+anpGDvy721YX9BB+lZmympl4wtI6u7A670OW8ZYDEUVlU:aRFKV5a6fu+ansawYXwZmzpl4wsA61FP
- TLSH T15CB2E1710C85F65EB0E2FC18C9311FCDE4E8AD9888B05229BE0FC4B285C4FE4AD5DA94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/2.exe unpack001/3.exe unpack001/q.exe
File Explorer
-
Desktop (1).rar.rar 23KB
-
2.exe.exe 18KB
-
3.exe.exe 14KB
-
q.exe.exe 16KB
2.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 9fcb9e513cfe34500707cb950e17baab6631ca455ed22fa647346c955df43b82
- MD5 2923af1a6cd320dd811789afe59a2183
- SHA1 fdc33843a29872c42d3e5d73de181af618685b2c
- SHA512 e43b09804bf0f3c056b240cba3549f31a4ad7a34e28e4f071c282c20a9de9bf6c4f1647f82228f78967885f7d030924f99f3ace1dd98910219b270276c9a4fea
- SSDEEP 384:8yGTIkP6QpBh/mLu12ekubSN9InZw/CFJi69dBgr9Y4:WTHymhuukF94jL4
- TLSH T1DD823C48FFD4C258E1BD0B3A49F3131E4631E5599E03DB8E18DD829E1F71AE946407E1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
3.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 6c099effcacee3c0572925a6084b39efc56e5d37110a0301d7775742bfc13dcd
- MD5 6ccfab5f4d27f02d8c79cd7442519290
- SHA1 f22864cad119a3e074e8a3f1619e46a63a91abf7
- SHA512 4377257e45d8ceb2b82b39958c2c8e97048acdf2df3f0c39280e506c490cdd3cc631d1f791ae98f798656ed5c8535e0a152cb4c336520ab0ed7badd9d846e853
- SSDEEP 384:/2KNueTrZumZOLoTer9ZSZwnZFJp0Bgr9Y4:ubWdIr9TuL4
- TLSH T1A2620804EBE88794EABD0F3969F313554231E4E3D903CB8D18E4025B7E71BD59600BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
q.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b9bdd5e535db93c9d6fd0b29b91383ac6c1c40304519796894f7958265ad3c57
- MD5 af3cdc7cd49c4091f72464d65a83953d
- SHA1 a7531b80fefb9c9c8ea9209147c867495a9ba2ff
- SHA512 00a5fd43092811edb7452d8416a293b316eb0ff0a22e42c2c92684574be29f848829ec46dcd97fdaa7387d0fa16979fb615e2b78d008a094738cea51113b171c
- SSDEEP 384:jsWdC0Gu+ALtmlItV5IAgeMy9kSZwudFJQfBgr9Y4:gWdCpytz3Tr9XkL4
- TLSH T1B2722A44EBF98314D77E0B7A29F313154A31F9969E03CB8F28EC42667E71AD49640BA1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
21150
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ