General
- Target forum.twistngo.co.uk.exe
- Size 143KB
- Sample261109-qperbaz1ht
- SHA256 d3d7f3d22a1bed4f6fe36e586239f9604826e3c36fd0db70735b514f7e5f2bc2
- MD5 74926413aa6627f9021ae66f5bcb33e5
- SHA1 1aa61c5f0d23b60dadc94146c1d030d52040177b
- SHA512 e514a1ed2429b52ac036a0c07497ca340b4e60e588e8099f596c2734d1e8dc2436800e8b48ec9ccb29a7e74e0023a835d182b2a2d231622a69acada0911a9fa2
- SSDEEP 3072:BsD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9X4:BplzpTVDVa2en/V6Mp
- TLSH T167E38C2279D0C032D06B11715AB9D7B69969FA33177484C7F3840FBD6E612E09B7E34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
forum.twistngo.co.uk.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
forum.twistngo.co.uk.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
vertexnet
C2
-
forum.twistngo.co.uk
Mutex
-
VN_MUTEX16
Attributes
-
C2Path
/login/
Targets
-
- Target forum.twistngo.co.uk.exe
- Size 143KB
- SHA256 d3d7f3d22a1bed4f6fe36e586239f9604826e3c36fd0db70735b514f7e5f2bc2
- MD5 74926413aa6627f9021ae66f5bcb33e5
- SHA1 1aa61c5f0d23b60dadc94146c1d030d52040177b
- SHA512 e514a1ed2429b52ac036a0c07497ca340b4e60e588e8099f596c2734d1e8dc2436800e8b48ec9ccb29a7e74e0023a835d182b2a2d231622a69acada0911a9fa2
- SSDEEP 3072:BsD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9X4:BplzpTVDVa2en/V6Mp
- TLSH T167E38C2279D0C032D06B11715AB9D7B69969FA33177484C7F3840FBD6E612E09B7E34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects VertexNET stealer
Executes dropped EXE
Adds Run key to start application