General
- Target 331d8611-3c1b-4c4d-abb2-a82902d2b341.zip
- Size 34.1MB
- Sample261030-pjd26ab16w
- SHA256 863d072e7e3f3b83e1fabd0213d45a42eda929ee3cc4c9aebb8b2757ca7c7006
- MD5 8b9c4c2d5eea797c62cd9ae17da996d8
- SHA1 6e6e58a0dbe34b048e1fa98f553c24c43179c2bd
- SHA512 433f00b7cfefd787c520a29030a33d6181412853dd61be0763e78a3fbfe06b7bb6f914fd6cc233ef49d8fd5ef7aa1b51645395c1ff3145bbe4daac26ac855f01
- SSDEEP 786432:npfJ0EezsBxpnOuMe1EMdaumh7yAKYSsFdnFq2HXWbK0DzgOr9:n70rzsHd11EMda/uShFq2I3D9
- TLSH T1E27733CC1AD7795678D8611CB09C8D3BA2C9DC1642AAC3C5E613442DB6EE5C6FA83F0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
MuseHub.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
MuseHub.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target MuseHub.exe
- Size 34.5MB
- SHA256 cb6fe460113751f2240dcb7a88bb393af7d674dc0a464d255360697b1098b83e
- MD5 476f16de7a72cf7bc15b57389263f204
- SHA1 340fdb080b0b036fcb09bece2d77eef941918443
- SHA512 c2437a5b1e35a061e389e5a5251690d1495ef26c1c9d226d413ec968d5c49c4956398d21e6521b1a62d9bb774cd90e34f98943288202f3459a3bce424251bdcc
- SSDEEP 786432:rpj6UBlolzXN0mQAXaYN2sQRvy8koMUjTndU4JfKROuT/ouPy:16ulol9VXaYN2v6eTdU4Sjty
- TLSH T15C87335C57E941A6E0BAE378A4664507EBB3BC064774D3CF02A1841D2F6BAD0EA37F11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger