General
- Target dbf61c74b417371377d4011fa09211cde9c1033081ce30b2f20948f7ebc032a1
- Size 9.6MB
- Sample260415-kstrrac19s
- SHA256 dbf61c74b417371377d4011fa09211cde9c1033081ce30b2f20948f7ebc032a1
- MD5 15dfd82c59174e44292da29db54a4ff9
- SHA1 61b86d702f886c7a0be09d026c4b327473fdeb3f
- SHA512 60ab002027b72e9d249e646c1fd3302447c7e82391828052d9f6a376c06820d4f35ae5142606bfca72ed1288d4bb342dfd905c7fd74f1d9ec72e123ac8ebad06
- SSDEEP 196608:CbcOli2XykeihBWeFXy+IFTYMjcVfx3yJ+KGxr2cqu:CQ9NHcBWeFXOlRjSQJglr1
- TLSH T126A6F133F18270B5D0E42030616A7BBB763872164B0D99FBD397AEFC2A351D0666B356
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dbf61c74b417371377d4011fa09211cde9c1033081ce30b2f20948f7ebc032a1.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
dbf61c74b417371377d4011fa09211cde9c1033081ce30b2f20948f7ebc032a1.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target dbf61c74b417371377d4011fa09211cde9c1033081ce30b2f20948f7ebc032a1
- Size 9.6MB
- SHA256 dbf61c74b417371377d4011fa09211cde9c1033081ce30b2f20948f7ebc032a1
- MD5 15dfd82c59174e44292da29db54a4ff9
- SHA1 61b86d702f886c7a0be09d026c4b327473fdeb3f
- SHA512 60ab002027b72e9d249e646c1fd3302447c7e82391828052d9f6a376c06820d4f35ae5142606bfca72ed1288d4bb342dfd905c7fd74f1d9ec72e123ac8ebad06
- SSDEEP 196608:CbcOli2XykeihBWeFXy+IFTYMjcVfx3yJ+KGxr2cqu:CQ9NHcBWeFXOlRjSQJglr1
- TLSH T126A6F133F18270B5D0E42030616A7BBB763872164B0D99FBD397AEFC2A351D0666B356
- MD5 SHA1 SHA512 SSDEEP TLSH
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
Suspicious use of SetThreadContext