General
- Target prosvet-1.1.2-windows-386.zip
- Size 5.5MB
- Sample261027-q48b6sdf96
- SHA256 a18d6141bd1a24cb42bc13718257d6acfe0eef36c006d4a64b8c1de3b2bec66b
- MD5 6a848fc48e66246c71d2f1249c65d0ac
- SHA1 34f88e1e81daffe08edf2e7fdde8d9a1fcefe40f
- SHA512 ea6fc28e2e2d3d0c250b43621f938ef509dd3d90f8ce887e32c68b87a0f60181f17a6bd331a9c2960c49926e8db58212de0790325d1a8b0b0782ddb408d27042
- SSDEEP 98304:JUoLQV3nm1uyT1kfshwD/3wpR/WXPksNnTIaVl9aJXzI5oDX+fGwuN021DuMdy55:OoF0glm7wpRO/k7aT9AX0WDuGwa0SDVm
- TLSH T18E463386B8313AC9598AC441F5BC459A83869C21B6DDDD19AF1CF9E53A1D8C3CE3F813
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
prosvet-1.1.2-windows-386/prosvet.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
prosvet-1.1.2-windows-386/zapret.bat
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target prosvet-1.1.2-windows-386/prosvet.exe
- Size 13.2MB
- SHA256 8ce2e3df7f86da2898e537f82d80a32507139f1e92266580d2066cba484adb29
- MD5 7e7070cb52e59c58ffbd6008fc0213e9
- SHA1 41dc32942e28133e3fc3031bd085759b2ecf8674
- SHA512 72982bd08b50c8aa0e144c5f1d301727f40644a736367b0430a59d53f687cab6f4dea0f1e5d08f0159f6b4b2f7ffd18859fe744ab1bf40f48464caee5436aa4c
- SSDEEP 196608:Yx9X+m+R67jCp3vCQdPJpck43VSkN6SoGWCObTH:Y/ZM3vCQb43gQ/VOv
- TLSH T1BFD65A55FACB5AF6E907493040ABB32F13345D018B24CFD7EB487E65FE37AA21826605
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target prosvet-1.1.2-windows-386/zapret.bat
- Size 617B
- SHA256 cd34953eda1cdc7e2a07ed9880485d18ea02ee652f5cf40487eca15ecbda756b
- MD5 b79bb1960a771513b28b174bb3024030
- SHA1 02dbc53c62f1d751a834d0f4195956df18877846
- SHA512 018d7f1a7c5c38ba46fbc61cac54d26aaa5484440f3af30ae8cca19b50a6a073a836f44adf58a5d58de450a6bf8ae732e7aba1f3144b0b318e36a9e837daaa92
- TLSH T10BF0A24ED749D6F835224580154F6991528EC975425749C8337F81CB330EE5E9ABE0F3
- MD5 SHA1 SHA512 TLSH
Executes dropped EXE
Loads dropped DLL