General
- Target RoxenLegit.exe
- Size 789KB
- Sample261028-1wsxmat13p
- SHA256 fd6498427f48886b62a3a1de62b7e7cf1cac9dc89745f5616878b1fabf6e6750
- MD5 a1640b167704c3c7de1d0965bc343a9d
- SHA1 3fedf5e4928d4a473935bda6466030eb62cb5f8a
- SHA512 a3afc1358a3e0c29c4e3218805d8df82632c1649df2fa09e8000d01356ef3952a6540572c16ffeaa956e410d9fdad93cc681f3192105a730135a94e46472a2d0
- SSDEEP 6144:xEOQr8FXAEBmGlvvF2cd8uEpECpr23PePL7/HJi5AR8L/hTa320SABAdxj+gYSGK:Z9vBzE7A/ePPP0y2G28Znk
- TLSH T115059D19FAA514F9E167D538CD735502EA327C4E07A09ACB23A04A961F37BE09F3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RoxenLegit.exe
Resource
win11-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target RoxenLegit.exe
- Size 789KB
- SHA256 fd6498427f48886b62a3a1de62b7e7cf1cac9dc89745f5616878b1fabf6e6750
- MD5 a1640b167704c3c7de1d0965bc343a9d
- SHA1 3fedf5e4928d4a473935bda6466030eb62cb5f8a
- SHA512 a3afc1358a3e0c29c4e3218805d8df82632c1649df2fa09e8000d01356ef3952a6540572c16ffeaa956e410d9fdad93cc681f3192105a730135a94e46472a2d0
- SSDEEP 6144:xEOQr8FXAEBmGlvvF2cd8uEpECpr23PePL7/HJi5AR8L/hTa320SABAdxj+gYSGK:Z9vBzE7A/ePPP0y2G28Znk
- TLSH T115059D19FAA514F9E167D538CD735502EA327C4E07A09ACB23A04A961F37BE09F3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext