General
- Target garrouse.radio.fm.exe
- Size 143KB
- Sample261102-gt7s8a1sgs
- SHA256 bddd54a511adaeb0847b3327b39efd54acd20562906f042a2f5b8976d48f161d
- MD5 e0774c46accf8423bc71dd64cfb35e52
- SHA1 a136fa1cffda3f59648c3881e885e1369d05b269
- SHA512 36110a062a208ddfd420180f9fa6c2415776496c42894aaa6cd7b687ebf4f6112590ff081b2ea9255496ca77d786c6193123ab6b104a76bb6d57c04acd32d480
- SSDEEP 3072:BsD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9X4:BplzpTVDVa2en/V6Mp
- TLSH T1A6E38C227AD0C032D06B11715AB9D7B69969FA33177484C7F3840FBD6E612E09B7E34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
garrouse.radio.fm.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
garrouse.radio.fm.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
vertexnet
C2
-
garrouse.radio.fm
Mutex
-
VN_MUTEX16
Attributes
-
C2Path
/login/
Targets
-
- Target garrouse.radio.fm.exe
- Size 143KB
- SHA256 bddd54a511adaeb0847b3327b39efd54acd20562906f042a2f5b8976d48f161d
- MD5 e0774c46accf8423bc71dd64cfb35e52
- SHA1 a136fa1cffda3f59648c3881e885e1369d05b269
- SHA512 36110a062a208ddfd420180f9fa6c2415776496c42894aaa6cd7b687ebf4f6112590ff081b2ea9255496ca77d786c6193123ab6b104a76bb6d57c04acd32d480
- SSDEEP 3072:BsD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9X4:BplzpTVDVa2en/V6Mp
- TLSH T1A6E38C227AD0C032D06B11715AB9D7B69969FA33177484C7F3840FBD6E612E09B7E34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects VertexNET stealer
-
Executes dropped EXE
-
Adds Run key to start application