General
- Target FallenStep.exe
- Size 863KB
- Sample261113-xyamaaz13m
- SHA256 c93668106edf6a9111ac2d088cd6569a3714d2711acedd01fdd1e1131738223a
- MD5 1e05bd9c3af63e83ce1fdfcd67b95096
- SHA1 117429ded19046a97e79163fce68ec3991cbf0f4
- SHA512 6bc90058db72453819df7ca85de7fda68447ba4de2dbd962f3dd4bb32f0cccb5e75dd1f33834be6d7b4e3f8b29e4ec801c08a53b814a3d35247a1028242e3806
- SSDEEP 24576:YV7AC3Ldle354dQp2IHE2Ffsa5K/qEE+aEN:YVdLdCHEAK/VRaE
- TLSH T19315129B73A634F8D6B7967849E20286E7377C3903114BDB078807653F636D09E39BA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FallenStep.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
FallenStep.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target FallenStep.exe
- Size 863KB
- SHA256 c93668106edf6a9111ac2d088cd6569a3714d2711acedd01fdd1e1131738223a
- MD5 1e05bd9c3af63e83ce1fdfcd67b95096
- SHA1 117429ded19046a97e79163fce68ec3991cbf0f4
- SHA512 6bc90058db72453819df7ca85de7fda68447ba4de2dbd962f3dd4bb32f0cccb5e75dd1f33834be6d7b4e3f8b29e4ec801c08a53b814a3d35247a1028242e3806
- SSDEEP 24576:YV7AC3Ldle354dQp2IHE2Ffsa5K/qEE+aEN:YVdLdCHEAK/VRaE
- TLSH T19315129B73A634F8D6B7967849E20286E7377C3903114BDB078807653F636D09E39BA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Suspicious use of NtSetInformationThreadHideFromDebugger