General
- Target m.ddshu.org.exe
- Size 143KB
- Sample261111-ndeaasha52
- SHA256 3b0ad1ab3b32f77fdd62fa90a92fa5ce930ac7dfcb7905683044e9825e5fc5a7
- MD5 e722efd74c48a435f6b634523e58fcee
- SHA1 ad70570752f9a192d8acbdb7edc2f79c6710ce26
- SHA512 dc5e4309d761c0195b2e86ee5180c38a62449c4c1a0567d818ef62bf272006c66334dfd6f712b8ec020b2fc5f22cfa6003baca9237850da9b7125364adef6e74
- SSDEEP 3072:BsD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9X4:BplzpTVDVa2en/V6Mp
- TLSH T1B7E38C227AD0C032D06B11715AB9D7B69969FA33177484C7F3840FBD6E612E09B7E34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
m.ddshu.org.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
m.ddshu.org.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
vertexnet
C2
-
m.ddshu.org
Mutex
-
VN_MUTEX16
Attributes
-
C2Path
/login/
Targets
-
- Target m.ddshu.org.exe
- Size 143KB
- SHA256 3b0ad1ab3b32f77fdd62fa90a92fa5ce930ac7dfcb7905683044e9825e5fc5a7
- MD5 e722efd74c48a435f6b634523e58fcee
- SHA1 ad70570752f9a192d8acbdb7edc2f79c6710ce26
- SHA512 dc5e4309d761c0195b2e86ee5180c38a62449c4c1a0567d818ef62bf272006c66334dfd6f712b8ec020b2fc5f22cfa6003baca9237850da9b7125364adef6e74
- SSDEEP 3072:BsD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9X4:BplzpTVDVa2en/V6Mp
- TLSH T1B7E38C227AD0C032D06B11715AB9D7B69969FA33177484C7F3840FBD6E612E09B7E34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects VertexNET stealer
Executes dropped EXE
Adds Run key to start application