General
- Target fly88.care.exe
- Size 143KB
- Sample261111-sqmvesac22
- SHA256 215ced98d61a49b687cd7d6ffe423910c40e833dda9de1ac13882c4c1a112d9a
- MD5 c5f81c651bbbf7278a329ba2b9048158
- SHA1 27de8f31b317b0f8b78fa02c425c2dc9f27733db
- SHA512 dec8a9eb6fe880d4ecb2cf72c97c4a8d3eae234d6b9a0b2438144a2dc3f232ae5ec535bf69e0cf4fe3613e4a08c3237dfab20faac800abacf06df99c08c9c28c
- SSDEEP 3072:BsD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9X4:BplzpTVDVa2en/V6Mp
- TLSH T107E38C227AD0C032D06B11715AB9D7B59969FA33177484C7F3840FBD6E612E09B7E34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
fly88.care.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
fly88.care.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
vertexnet
C2
-
fly88.care
Mutex
-
VN_MUTEX16
Attributes
-
C2Path
/login/
Targets
-
- Target fly88.care.exe
- Size 143KB
- SHA256 215ced98d61a49b687cd7d6ffe423910c40e833dda9de1ac13882c4c1a112d9a
- MD5 c5f81c651bbbf7278a329ba2b9048158
- SHA1 27de8f31b317b0f8b78fa02c425c2dc9f27733db
- SHA512 dec8a9eb6fe880d4ecb2cf72c97c4a8d3eae234d6b9a0b2438144a2dc3f232ae5ec535bf69e0cf4fe3613e4a08c3237dfab20faac800abacf06df99c08c9c28c
- SSDEEP 3072:BsD2ADkpFGkTXlDJA6ba2esDetNxVgbTGV9X4:BplzpTVDVa2en/V6Mp
- TLSH T107E38C227AD0C032D06B11715AB9D7B59969FA33177484C7F3840FBD6E612E09B7E34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects VertexNET stealer
Executes dropped EXE
Adds Run key to start application