General
- Target EverlastingResearch.exe
- Size 10.1MB
- Sample261024-dacl7aft4s
- SHA256 60a2fa3a80d822ebc2e6d45c9d2ff7ea025ea78f324bacc359507bd826b4dd83
- MD5 cee4bb91746cd0d36aa7140aeb9ac168
- SHA1 b917d29a0f1481e8034e810749c06802330883a1
- SHA512 2df66802bf376d98ff85128f5ed29ca457182fefa8cf0b1c54f794d77519597d16b9dc705d9ff4c7755516feb94b66f532f8182365960776c2999a7ab02eebbf
- SSDEEP 196608:UUN5W2ZeassB7EPjvpseEL2ijdZYwFH9U3at1uwbcvKH4xUEQf/gTu+v6ly:P428as4kmeNihG2HO3SuwICgUEQf7+S0
- TLSH T198B633D4F42A42E9FB69A1389BEED537FB7961338B1B1136A42975E18A00CD4F035BC1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
EverlastingResearch.exe
Resource
win10v2004-20260911-en
4 signatures
900 seconds
Behavioral task
behavioral2
Sample
EverlastingResearch.exe
Resource
win11ltsc2024-20260911-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target EverlastingResearch.exe
- Size 10.1MB
- SHA256 60a2fa3a80d822ebc2e6d45c9d2ff7ea025ea78f324bacc359507bd826b4dd83
- MD5 cee4bb91746cd0d36aa7140aeb9ac168
- SHA1 b917d29a0f1481e8034e810749c06802330883a1
- SHA512 2df66802bf376d98ff85128f5ed29ca457182fefa8cf0b1c54f794d77519597d16b9dc705d9ff4c7755516feb94b66f532f8182365960776c2999a7ab02eebbf
- SSDEEP 196608:UUN5W2ZeassB7EPjvpseEL2ijdZYwFH9U3at1uwbcvKH4xUEQf/gTu+v6ly:P428as4kmeNihG2HO3SuwICgUEQf7+S0
- TLSH T198B633D4F42A42E9FB69A1389BEED537FB7961338B1B1136A42975E18A00CD4F035BC1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext