General
- Target invoice and packing list.exe
- Size 1.2MB
- Sample260901-g2v5dstdke
- SHA256 d2a4ad1db761a3776160317ba0325d100e65d2baea62d52effee899ab5d355a8
- MD5 6b058559a54275746bfc645d5c5214d0
- SHA1 46cb66556e0b2b44df79d815fc27cd65859d759d
- SHA512 ae99d8274dc0479b3d94f8a5ebb58ad0b30cb56f005269d3ad52b61e4dbbe6173d01b53a13119f191176df01e60e821dcadde5240242aea6a80e4af5dd338ac2
- SSDEEP 24576:4cUAtPa6ObJ+SAmkqkX7YhQzi5IO7WL4iAJR:HXPalESAmyWQzmHWL
- TLSH T10E45F02112D99F59F5BF97348875501887F3BC46DF31D7EE3E8C18EA3A22A818661723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
invoice and packing list.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
invoice and packing list.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target invoice and packing list.exe
- Size 1.2MB
- SHA256 d2a4ad1db761a3776160317ba0325d100e65d2baea62d52effee899ab5d355a8
- MD5 6b058559a54275746bfc645d5c5214d0
- SHA1 46cb66556e0b2b44df79d815fc27cd65859d759d
- SHA512 ae99d8274dc0479b3d94f8a5ebb58ad0b30cb56f005269d3ad52b61e4dbbe6173d01b53a13119f191176df01e60e821dcadde5240242aea6a80e4af5dd338ac2
- SSDEEP 24576:4cUAtPa6ObJ+SAmkqkX7YhQzi5IO7WL4iAJR:HXPalESAmyWQzmHWL
- TLSH T10E45F02112D99F59F5BF97348875501887F3BC46DF31D7EE3E8C18EA3A22A818661723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Suspicious use of SetThreadContext