General
- Target mod_payload.bin
- Size 1002KB
- Sample260315-a4cbqsfs7v
- SHA256 493a52ae0ef7fcd776bffe1801c400138662e0d78afe03cf9fb455ae2a9aed5a
- MD5 2ffacdf417772f8723f3c96c80e84655
- SHA1 3c7fe41d04be27c742689fda574b7350fc9eed41
- SHA512 b2adff3e24c060bbd1d5d1e97fbb6ed26c1aa3b7664282819678bdb81ed8c08d1c651ee99a208a573399289ac1eb833fa02c94d77196255cb1ac92c00a2079a9
- SSDEEP 24576:M6jar/v407LRNTAUte4B3gYhT3iKaMo58Fkuo3CLexXmeIKi+i5Mo7:Ir7VqQ3gMDiMoGkHyZKiZ7
- TLSH T15425E10327768160D15BC9BEB632CA36F6363C5CC420B636EEB05E173F69710A9B6746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
mod_payload.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
mod_payload.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target mod_payload.bin
- Size 1002KB
- SHA256 493a52ae0ef7fcd776bffe1801c400138662e0d78afe03cf9fb455ae2a9aed5a
- MD5 2ffacdf417772f8723f3c96c80e84655
- SHA1 3c7fe41d04be27c742689fda574b7350fc9eed41
- SHA512 b2adff3e24c060bbd1d5d1e97fbb6ed26c1aa3b7664282819678bdb81ed8c08d1c651ee99a208a573399289ac1eb833fa02c94d77196255cb1ac92c00a2079a9
- SSDEEP 24576:M6jar/v407LRNTAUte4B3gYhT3iKaMo58Fkuo3CLexXmeIKi+i5Mo7:Ir7VqQ3gMDiMoGkHyZKiZ7
- TLSH T15425E10327768160D15BC9BEB632CA36F6363C5CC420B636EEB05E173F69710A9B6746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess