Analysis
- max time kernel
149s - max time network
161s - platform
windows11-21h2_x64 - resource
win11-20250619-en - resource tags
arch:x64arch:x86image:win11-20250619-enlocale:en-usos:windows11-21h2-x64system - submitted
24/11/2025, 16:34
Behavioral task
behavioral1
Sample
90ba5aebd28cb029273ecea4d256e43c38e0e8a5cc7790b4c972ac3c07d9ac5c.exe
Resource
win10v2004-20251016-en
3 signatures
150 seconds
General
- Target 90ba5aebd28cb029273ecea4d256e43c38e0e8a5cc7790b4c972ac3c07d9ac5c.exe
- Size 596KB
- Sample251124-t3lcssslbk
- SHA256 90ba5aebd28cb029273ecea4d256e43c38e0e8a5cc7790b4c972ac3c07d9ac5c
- MD5 e25ce00d0cfb7143c1c40549aa75ca0f
- SHA1 5b0e61346fbab484bd60fd90b7a43efce349be13
- SHA512 ee77257f00b078aa5154c7ef0d322146b6ba8694dc91821d38ccbeb9c0bfc0a2bcf9d1f62cc31cdb068a7ba931b224cefeb633093824462f1ba5d83ae346ce6c
- SSDEEP 12288:EDVtqePqLTXt8+Ml1n4SQQ95LQ17wkon73pz4ZdY51rm:EDVFP898LnS717wH9I01m
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Detects Nighthawk C2 framework loader 2 IoCs
resource yara_rule behavioral2/memory/5484-0-0x0000000140000000-0x00000001400DA000-memory.dmp family_nighthawk_loader behavioral2/memory/5484-116-0x0000000140000000-0x00000001400DA000-memory.dmp family_nighthawk_loader - Nighthawk family