tsunami-v1.2.1-windows-amd64.zip
- SHA256 f51c4f5880d498f2498ba06ff0c2651f1ebe04ecd01239a2a9d3f01dacf9cfac
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tsunami-client-windows-amd64.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tsunami-client-windows-amd64.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tsunami-server-windows-amd64.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
tsunami-server-windows-amd64.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target tsunami-v1.2.1-windows-amd64.zip
- Size 6.0MB
- Sample261102-dblw9aev6t
- SHA256 f51c4f5880d498f2498ba06ff0c2651f1ebe04ecd01239a2a9d3f01dacf9cfac
- MD5 05c7eba7f914631dca523b2ce9059ddd
- SHA1 bc3e838b6223e41c7dd1083fbeae2ed239d0ade1
- SHA512 5930f41705a5483cf866f2f064f0f5732804d3f5ce8a9729b2817d33612433b0acdcc807a4061feddcedd625d0920e1cd1b9e8eb1c9a4d0eae4cc4f068d9c82c
- SSDEEP 98304:VTlANJa3/NhojWinlhPoUhnrtZlaevoYgV0ECde15gPv+EaYCfgsasYd/z5Y6FvV:FSjwXinLPoUhrHMSotn/5gPwYrTnZvFN
- TLSH T1EE5633F8386467D3E4CAC4F02BBE9146F8519C18A8F3D5A3B6D58F6F16C80914ADD8B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/tsunami-client-windows-amd64.exe unpack001/tsunami-server-windows-amd64.exe
File Explorer
-
tsunami-v1.2.1-windows-amd64.zip.zip 6.0MB
-
tsunami-client-windows-amd64.exe.exe 7.1MB
-
tsunami-server-windows-amd64.exe.exe 7.5MB
tsunami-client-windows-amd64.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 43e687be0b22d56c33b0ea71740332f9ce9fd6367cd4f68a516414c8af1a0706
- MD5 79733dec3bed938262f53ac71861368b
- SHA1 c5c5021110afb2d13b1e6c5afe82941dcedfc838
- SHA512 b29c9662e1a42578b598bdf05769f2b5cd2be0e325c2d9e85b6303a68ae9b838be4779a9cd7e109fed8414f762e10b473b78454bc7e89b3ccf14a3b0395e223a
- SSDEEP 49152:8YCXo0xojxWQHmWRtHg9XtgBGEJ6N1Kc8K361Sq7qt5gUCORcQ2LAtMBgRsd5VmP:8LM73SO6vl6wjQQUqzgd9jE
- TLSH T12A764A07EC6145E8C0ADE13485A29262BB717C885B3127D73B90F7682F76BD06FBA744
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
505408
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
503KB
Virtual Size
869KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
71KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
62KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
tsunami-server-windows-amd64.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 9bf907e679016429ae9b06c721b39f29b2aed07b985707d459f3b61bb9f2c0d0
- MD5 057110846e0f874786a3122b0b3b47c1
- SHA1 d5baabbc82e6e49b37099c4e82074d7285baea7c
- SHA512 63a9090765fd25c5dd70b3e56549459a4e9bce2c10b8dfd1c62852a9c0f79966eda2bbbc0e4067d9dce2f6ebf8977e1e3d733c8dd357cac2222b8b2ffde24df6
- SSDEEP 98304:u93TOHDpJVRrUOTnPOyDokTZcZykNlnm5FXgEH:uByHDpJLrUOrf9TqZyk7ivH
- TLSH T120864907E8A545E9C1A9D5318A729252BF71BC484B2123D33FA0F7686F76BD07EB9340
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
510048
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
3.5MB
Virtual Size
3.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.6MB
Virtual Size
3.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
365KB
Virtual Size
712KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
82KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ