tsunami-v1.2.0-windows-amd64.zip
- SHA256 3d6e2eb5f3c60b5141cd4960e192dcba11d18c58eea80f95dc00ccd31c491a66
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tsunami-client-windows-amd64.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tsunami-client-windows-amd64.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tsunami-server-windows-amd64.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
tsunami-server-windows-amd64.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target tsunami-v1.2.0-windows-amd64.zip
- Size 6.0MB
- Sample261102-dbm5baev6v
- SHA256 3d6e2eb5f3c60b5141cd4960e192dcba11d18c58eea80f95dc00ccd31c491a66
- MD5 0595aaae41e2277a81cb0634bb6834d3
- SHA1 837738b2fac157874d1b2ae066982064fd1d935a
- SHA512 672e9ad07338e54a3b9dc2319393d4820ac2fef4f61a707f901499fee8228770b166983db1f05f5b1885a42a65780a5732f7af8db4271a5540d526ac29dc5c49
- SSDEEP 98304:n9IddkvcEG7bkv0kFwRA04nXcwMLbFF2cEERa01/AVlMHhIle0pzJugT/Eoz5Y6n:9sdkvchPkvwRA1xM3FAya0xAVCHhCzJn
- TLSH T16C5633FBE650C6BA47B0C7116AEBCCD6E912D84D7EF780B26AA57604060C5D253B9CC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/tsunami-client-windows-amd64.exe unpack001/tsunami-server-windows-amd64.exe
File Explorer
-
tsunami-v1.2.0-windows-amd64.zip.zip 6.0MB
-
tsunami-client-windows-amd64.exe.exe 7.1MB
-
tsunami-server-windows-amd64.exe.exe 7.5MB
tsunami-client-windows-amd64.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 2b51159567729ceca418ea891b9b3fb2714891075ae0a5efc29062c80a8fd95b
- MD5 a00968e0c3adb03cf0e76b174d15a7a2
- SHA1 8234bd63020f987ab43e57c7d73fb54506ac8c5a
- SHA512 94c070662180bc3eca393fe104bc6a0f3058db9cf842582022a4a7c7f914ecd7fe6b3bffb463c8e0105901e62ec8e203375781a4735fcef494e9216ed8a598e0
- SSDEEP 49152:tYCXo0xojxWQHmWRtHg9XtgBGEJ6N1Kc8K361Sq7qt5gUCORcQ2LAtMBgmsd5VmG:tLM73SO6vl6wjQQUqUgd9AE
- TLSH T1EA764A07EC6145E8C0ADE13485A29262BB717C885B3127D73B90F7682F76BD06FBA744
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
505408
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
503KB
Virtual Size
869KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
71KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
62KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
tsunami-server-windows-amd64.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 1b3764e357f9e6a49dbe078dbb6d4ffb66c001a8f58e98041cf1225661b01a8d
- MD5 dac4537f91de107bc5029fd8bb651586
- SHA1 168404dd4b4c0197d84c1ae7c6573624ad7de410
- SHA512 e6d636f6e5223031fac2c870e1a580a2626cf7fd5c96056e2590aa90df9a1efdf45766abc07afd1100e42b3b637c896db470cb26367faa4785c45be2b3f5305a
- SSDEEP 98304:t93TOHDpJVRrUOTnPOyDokAZcZykNlnm5FX3EH:tByHDpJLrUOrf9AqZyk7iOH
- TLSH T1C1864907E8A545E9C1A9D5318A729252BF71BC484B2123D33FA0F7686F76BD07EB9340
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
510048
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
3.5MB
Virtual Size
3.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.6MB
Virtual Size
3.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
365KB
Virtual Size
712KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
82KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ