General
- Target prosvet-1.1.0-windows-amd64.zip
- Size 5.4MB
- Sample261027-vbzlsaea86
- SHA256 699fda901025868a39b3d0617801c7a88210552712ca661f0d22f1a7b454c65e
- MD5 72422a5531773b3f0caa7dd7c3980214
- SHA1 0ffacd5166aabbf244245a0820bcdb6587014d4b
- SHA512 13bb675556664759c3028a2eb764a586acc0875ce407f8cc21751ecdc0192cd54157fa32e2ffd3b9868b9e5d4c39e2863be3a0b73ee63f99b208332cde52aa4e
- SSDEEP 98304:VHsuXzPiIb7X/xuuB7YGtdFv+VeEmfcKIvT2PsiPqzr1/XGtkaaeWBLCcA8XEoX:5PiIxu2Y++sffcKIv6PsIor1QaFVTUy
- TLSH T1D6463358836B5E8BEC25ACB4DF564865ECB84D096B3155A108CB9FC212C57FF10FC26B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
prosvet-1.1.0-windows-amd64/prosvet.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
prosvet-1.1.0-windows-amd64/zapret.bat
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
prosvet-1.1.0-windows-amd64/zapret.bat
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target prosvet-1.1.0-windows-amd64/prosvet.exe
- Size 13.4MB
- SHA256 d2d9af1a4e1fa3d8655c3d75e7f8f89994cee010ea61a25fb820fee64af67250
- MD5 2ddc118ac7220df793e836aeb58ac89f
- SHA1 a1c02cbfe9999f47635d27e42e83a6233dbb2d9b
- SHA512 c11c1a72f93c24633fbed6576d8865ef80d48ba98dee5f59044cc1c64b670f8a0eee9d90c0442ae2740bffd3090aec0403e3da1b34a6e6b22a2ed00f758bd461
- SSDEEP 98304:vZRQ8wiK1hLa/JkcbkwUXPHSIofniGRcsVJqCmB5RMiCwDIS4TBrppUy1u7MHr4E:7yzhIIyNR3JqlMiCwMOD
- TLSH T121E64A17E9A614E8C0AEC134866792227B717C494B3127DB2B50F6383F77BD0AEB9714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target prosvet-1.1.0-windows-amd64/zapret.bat
- Size 617B
- SHA256 cd34953eda1cdc7e2a07ed9880485d18ea02ee652f5cf40487eca15ecbda756b
- MD5 b79bb1960a771513b28b174bb3024030
- SHA1 02dbc53c62f1d751a834d0f4195956df18877846
- SHA512 018d7f1a7c5c38ba46fbc61cac54d26aaa5484440f3af30ae8cca19b50a6a073a836f44adf58a5d58de450a6bf8ae732e7aba1f3144b0b318e36a9e837daaa92
- TLSH T10BF0A24ED749D6F835224580154F6991528EC975425749C8337F81CB330EE5E9ABE0F3
- MD5 SHA1 SHA512 TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL