General

  • Target
    ZWXYSMLY.msi
  • Size 14.1MB
  • Sample250407-phvzaa1py5
  • SHA256 5b8982176cb4e178640c898395283e2c48a9be4ab21b245c1db2b4a16c2d7306
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • hijackloader

Attributes
  • directory

    %APPDATA%\Wordpadprotect_1

  • inject_dll

    %windir%\SysWOW64\pla.dll

xor.hex

Signatures

File Explorer

  • ZWXYSMLY.msi
    .msi 14.1MB

ZWXYSMLY.msi

  • SHA256 5b8982176cb4e178640c898395283e2c48a9be4ab21b245c1db2b4a16c2d7306
  • MD5 SHA1 SHA512 SSDEEP