General
- Target grade_Increment 2026.exe
- Size 3.5MB
- Sample261102-vx6l8axy6k
- SHA256 79d3a29f9a2bc8bf7c45cf13b98add264636c96c3b1b14c6a3238972391cfe5b
- MD5 8dde3632d8959dc522c8d3345a6273bd
- SHA1 c8aca49526c17ebbc940d6b94b0a9e7a9cad4d8c
- SHA512 250ddcd0db18733cf61ae62136426fd76587cc3eb3e8309e21dd1b8230ff5a68f549df99df4a958408bfccbb4babf70133b0a3a49642f50fe13ea734fbedf8c1
- SSDEEP 49152:HAVV0Q3d7O8H1M55CTZ/Gtso+TFYIh2AlyiQQ/h2:TQ3d7O8HagZetkFYW2kHI
- TLSH T166F5233D3BF466A8D4BF073815B4889543F0B91BAA21EB1E7E4E12EC4D207169726773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
grade_Increment 2026.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
grade_Increment 2026.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target grade_Increment 2026.exe
- Size 3.5MB
- SHA256 79d3a29f9a2bc8bf7c45cf13b98add264636c96c3b1b14c6a3238972391cfe5b
- MD5 8dde3632d8959dc522c8d3345a6273bd
- SHA1 c8aca49526c17ebbc940d6b94b0a9e7a9cad4d8c
- SHA512 250ddcd0db18733cf61ae62136426fd76587cc3eb3e8309e21dd1b8230ff5a68f549df99df4a958408bfccbb4babf70133b0a3a49642f50fe13ea734fbedf8c1
- SSDEEP 49152:HAVV0Q3d7O8H1M55CTZ/Gtso+TFYIh2AlyiQQ/h2:TQ3d7O8HagZetkFYW2kHI
- TLSH T166F5233D3BF466A8D4BF073815B4889543F0B91BAA21EB1E7E4E12EC4D207169726773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
Suspicious use of SetThreadContext