General
- Target 482988c5e0c6acd74ac336957307c6d78defc9e283a3aa770ece5783a507bd4f
- Size 4.6MB
- Sample261030-cxvwlsda87
- SHA256 482988c5e0c6acd74ac336957307c6d78defc9e283a3aa770ece5783a507bd4f
- MD5 f4641cfa7a9b8c71c282208032b3793b
- SHA1 02de5901f9351333db10ecc4d85787c27f4df7e0
- SHA512 fd2d7df0ccad0711051eb9ba47c687cc205bef970d2a91738037f2ae5c0425990280290efdf9cb2a08889cfe2d956db9fb0666ae8711df3aacc226ee45969938
- SSDEEP 98304:+3DJI6Lmeg1HTh4+A7nTYXtAs40nTrZaywzWIMxUm2ELcgo3M5nGlzg9:+TJI6CeSTYnTY9v40TgymjMxU/Eto3Ml
- TLSH T12226339546EA59D9C368D367083F422E41713BEC3123D162FD8866E2BEC365F3122DB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
POPTLC_Trainer_LNG.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target POPTLC_Trainer_LNG.exe
- Size 6.4MB
- SHA256 3d85fcf1dce67e76b1cb70ec56693863596ac4f38ff1e3a4c3d99a9eeccac544
- MD5 d14ef2bb3eaf95adfd296efdc6bc5e23
- SHA1 15aebf20351ee8f27c768b0f9ddf1ce03a57682f
- SHA512 32741d008d6853a74e754bd68c5597e2bed8ab76054ef7762b136bfc819045b988e970297a3d6598595dd6adb97dd877e86c85b82cd29d5cfb9adaee2bc0961b
- SSDEEP 196608:teOGIAkxpuvrXGwygTWBfkkl6eCxODUlU14JwI:+TFv2VseDg2pI
- TLSH T1BA66D02AFB4585D6C6EB07728C3C4E4943F1BD866F62DF4B68467E1AB8B77C28C01641
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.