General

  • Target
    grade_Increment 2026.exe
  • Size 3.5MB
  • Sample261102-vx6l8axy6k
  • SHA256 79d3a29f9a2bc8bf7c45cf13b98add264636c96c3b1b14c6a3238972391cfe5b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      grade_Increment 2026.exe
    • Size 3.5MB
    • SHA256 79d3a29f9a2bc8bf7c45cf13b98add264636c96c3b1b14c6a3238972391cfe5b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Accesses Microsoft Outlook profiles

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Discovers running processes

      Running process information can be used to identify security tools or plan follow-on actions.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks