General
- Target CahitBadge.exe
- Size 33.2MB
- Sample261102-pwwsqswt6m
- SHA256 76968046aa1ca7c584fbd8b24202996f712731341d46ed4d2392766ceb86389b
- MD5 cf6e58cb40d610533868dcb198663b40
- SHA1 848af02d9cf2ba407d144220ffaddf948c364b6b
- SHA512 507366393a19b0d3f9aca252ab6f4107e3610c112f17d8be8f18651b93baed9dc635e332bed3a2e75a706047404176ae9a4176e9274843dda44e5ea7b5ad2432
- SSDEEP 786432:/3bS4ce2snwoXQodmUJAPXxNWRphFBo+arug8zFyct4SFgpmlqrD9O8Qcx:/+4f/3dJA/+PhMrP8B2SFgpBdOk
- TLSH T11E7733F6617964BFEAD9B534F1E69900F333A0862B55C25BC2384C352EDBB40AE3055E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CahitBadge.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
CahitBadge.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
badge.pyc
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
badge.pyc
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target CahitBadge.exe
- Size 33.2MB
- SHA256 76968046aa1ca7c584fbd8b24202996f712731341d46ed4d2392766ceb86389b
- MD5 cf6e58cb40d610533868dcb198663b40
- SHA1 848af02d9cf2ba407d144220ffaddf948c364b6b
- SHA512 507366393a19b0d3f9aca252ab6f4107e3610c112f17d8be8f18651b93baed9dc635e332bed3a2e75a706047404176ae9a4176e9274843dda44e5ea7b5ad2432
- SSDEEP 786432:/3bS4ce2snwoXQodmUJAPXxNWRphFBo+arug8zFyct4SFgpmlqrD9O8Qcx:/+4f/3dJA/+PhMrP8B2SFgpBdOk
- TLSH T11E7733F6617964BFEAD9B534F1E69900F333A0862B55C25BC2384C352EDBB40AE3055E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target badge.pyc
- Size 652KB
- SHA256 16945a2abb9c93041749dfa0e3ac0f4904cc6c013fbcb72af6ee68ed8c08067c
- MD5 95da44003455f9a23dcba562199df349
- SHA1 b22b722308f745672054c0e01ebaea994b34f42f
- SHA512 6de0a63376b8578d0ee2dcaf5687fb16fc74368105646f4bb00779ccac216a17f2391ee09118eb3fa05f29fcb3b7cbff5603b9e70aaf8c4c21de9e1be35595ae
- SSDEEP 6144:NfJGZScL4siC/JNAufVO2oOT6e5LQoc+YFa0O5InwgLdS7WBrc1feZ5KEevfV:vcLAKYI2Uouw8uAL65KzvfV
- TLSH T132E45BB5AA6869BFEAE8B539B0D39D41F77291067605DA03F1384CBC7EC9314ED8120D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10