General
- Target rh_0.9.0.exe
- Size 494KB
- Sample250416-3zalkaxtfv
- SHA256 642aeebc65589ee43e09e3d4066e9519151031c43a7daa8dd6f4823fc804d27c
- MD5 01670e3502fb191bc0d6f3590ad6ed89
- SHA1 c22bd6859141af59062de7f68aff25177b3d56da
- SHA512 2cf227cd722e68e98a87225cdeb22fcd66b4b6519ecb1e904805e60d15560b0a8b08da0f0f0e5ddcd69fc51cdc997e8e541306633296bb01eb9070bc78117960
- SSDEEP 12288:Q5p1UZ32H10rH5ZVZEsh8ZskmY5a4JNXuOwhDy/K:Q5pOZGHOrH5RLG64JNXQ1g
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
rh_0.9.0.exe
Resource
win10ltsc2021-20250410-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target rh_0.9.0.exe
- Size 494KB
- SHA256 642aeebc65589ee43e09e3d4066e9519151031c43a7daa8dd6f4823fc804d27c
- MD5 01670e3502fb191bc0d6f3590ad6ed89
- SHA1 c22bd6859141af59062de7f68aff25177b3d56da
- SHA512 2cf227cd722e68e98a87225cdeb22fcd66b4b6519ecb1e904805e60d15560b0a8b08da0f0f0e5ddcd69fc51cdc997e8e541306633296bb01eb9070bc78117960
- SSDEEP 12288:Q5p1UZ32H10rH5ZVZEsh8ZskmY5a4JNXuOwhDy/K:Q5pOZGHOrH5RLG64JNXQ1g
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess