General
- Target feihudui187.zip
- Size 31.3MB
- Sample261110-pkgjnsaw9s
- SHA256 26fbbaae1a41ac2bc2e4100e58c1674201bdd5ed34f3f7916d2052c0a26111df
- MD5 9842ccdc55ecee1be722e0b99156124d
- SHA1 4908b710877a6126c4e87aa9e1e76c73d85cfa86
- SHA512 1295876f3a91bf054287b28d59b5bda58869c750860e55bd9608781122a879247b797a4142ff25cfa7c36af6089e44159b274da221e776e81438676c54bbab5b
- SSDEEP 786432:3CxbdhnfCJMGPk1Di4DNOCFzzt7P18AnX07UL3Eao:yxbXnfCJMAYDi4D0C5Z9nT3Do
- TLSH T1217733F1B043895A9DC19CE0E6C5C144E28A41E5CA743EB7D17A53F6C2E7AC7A4E73A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
README.html
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
README.html
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
UEMSAgent.msi
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral4
Sample
UEMSAgent.msi
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral5
Sample
setup.bat
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
setup.bat
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target README.html
- Size 1KB
- SHA256 02595856ad354a47e9c664a55dc428aad19ce73a00fe95228bbe590cfca944d8
- MD5 2d939d7afe37b02f77e4eb4d5e5916fc
- SHA1 7aaea8ffacef9986f3c99c9a172763fc90c71217
- SHA512 26df83433c38890b4e5bfe29b508666257b3abd562568c5fe7558925128c28d89d237420aa872db4710ef7d511b478e867751cb6426679a52554dc7b89ac948a
- TLSH T10021FEB3C2526B3AB563034E305BD6D42F12F28150545F5C72B640DAB8CA227B41B3DE
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target UEMSAgent.msi
- Size 31.8MB
- SHA256 92f68fc7f6d0f544a750bf67b4903d1a4062d1372b7f98ab5c2f698eb61359bb
- MD5 db7ca603d463a06806ff1660979f406d
- SHA1 823ade4e43d36416436a115c48ba562d94fa696f
- SHA512 8e2527478514cf5ec8b40fa0ffc53d91ae72a1ba75a8c96800e06282b5e76e2f2f61f4b9e979c15f691591ee4f926b17aa07aebf31de68638b13e94db702b8d5
- SSDEEP 786432:juvkjbX98hUIlkZpqcvX4kp1h1HnX6Jx5L3gxKF:ivk3X98hUUspqcvokD3yxU6
- TLSH T1FD77337234438836D5C26CB095E6C364D2A60D508EB42453A677B2BBDAF37C296F73E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target setup.bat
- Size 2KB
- SHA256 91f784bf3dd83c0f5135ac1fd00a0fdd430720ebc57ec4c2eccb7875dbc8a90d
- MD5 9cb71612a1aa60c6a9c893bcefced81f
- SHA1 b9259cb454959dca0a42de49c5ad6f336719a384
- SHA512 3eac954bc561dd2f1ba88324acc5baaaedca2c7b3932135a6ccb7ae69b8057a8540b85a70cbd25d5b4a558254789c977bd9439ca0643b8d655a3bf802c3120eb
- TLSH T11351E0D48F112F641465CF09E46B81C3E733D0416ACA753404AC7C6F7B8D6AA3D3EAA4
- MD5 SHA1 SHA512 TLSH
Score3/10