General
- Target wraith_ikhvapokav.exe
- Size 3.5MB
- Sample261107-txe9lads4v
- SHA256 f89f63bf4ab4b6cc6259a242b9d2b064925b8c9ff3bf6d7c933c9da9dd5c425e
- MD5 6fc714908e1aa5c3fbb66d1ef381ad4e
- SHA1 38c28cfb544473d938885bf803568c20ba42031b
- SHA512 e2236e9f7e973c36f5ba5c5377f9f03122e0c8a2e2882c872622ea3665db430b9a753d346ab1658d5905ed4ef5c6d71179fe05304786ae3993dcdc382553cbab
- SSDEEP 49152:cPkhgKEBl4HtB9adpLjQCYuvK5AOY8d06y83dSVIk2L39KVBtw2dSJgHY7vMHPSG:VeuvBdS6k4OdMgHpH1Gn+7
- TLSH T199069E43FAA581E8C09EC178C7179233EB72BC8D5A20A79B27D45A113F63B625F9D314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
wraith_ikhvapokav.exe
Resource
win11-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
wraith_ikhvapokav.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target wraith_ikhvapokav.exe
- Size 3.5MB
- SHA256 f89f63bf4ab4b6cc6259a242b9d2b064925b8c9ff3bf6d7c933c9da9dd5c425e
- MD5 6fc714908e1aa5c3fbb66d1ef381ad4e
- SHA1 38c28cfb544473d938885bf803568c20ba42031b
- SHA512 e2236e9f7e973c36f5ba5c5377f9f03122e0c8a2e2882c872622ea3665db430b9a753d346ab1658d5905ed4ef5c6d71179fe05304786ae3993dcdc382553cbab
- SSDEEP 49152:cPkhgKEBl4HtB9adpLjQCYuvK5AOY8d06y83dSVIk2L39KVBtw2dSJgHY7vMHPSG:VeuvBdS6k4OdMgHpH1Gn+7
- TLSH T199069E43FAA581E8C09EC178C7179233EB72BC8D5A20A79B27D45A113F63B625F9D314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Looks for VirtualBox drivers on disk
Looks for VMWare drivers on disk