General
- Target Syntex Hwid Spoofer.zip
- Size 8.2MB
- Sample260417-3ev2rsdv3w
- SHA256 2402fc6024a738982e7b88fab305e8e89e4229b6d2c3996f36cda71e536d778e
- MD5 a437b01bcad3804f4dde0e8f849c8710
- SHA1 48a0f584e1c3f5e408be50c52c7cbb6fd30c699f
- SHA512 f231b2f2088794b1f32b6c6abb39ba0e898a40ccc1753da60c3896fef6fe2c0664760988ba272098eb8f872e2a38b7f6a736e7a20e1c38e6787a2c9a7b69eca3
- SSDEEP 196608:ssAgilaDIhyAuI7fuKW56EDb4s2hquFIOq9PBPXKXx:JAgilacg+WhDbF2hqyIOgV6h
- TLSH T13C8633C781AC9F12B88857F758ACBD91D6F2A4B247FEC612CE788D6C055150F48B09FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Syntex Hwid Spoofer/ScriptHelper.exe
Resource
win11-20260130-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target Syntex Hwid Spoofer/ScriptHelper.dll
- Size 30KB
- SHA256 9293b9b6eff1d730157e6d50f5f2623791502cfaf97554dec18cb6f25a384da1
- MD5 3d68570e3b435f77e96fe36feaa8fe39
- SHA1 c97085efeabef9ce6163ca1bcda13d017e9a590a
- SHA512 4a672adb990d77b19d1c2fe57e53a564c37c564b55dab3702b602d8e66526f8fcd45d0eb1370d7e00df794d0e04f0f45ea282659dfb7743b7ce9fb8c541e08c1
- SSDEEP 384:/kkJppeFmGPNWFY0zFq1eeRCZETTiMCoOzdjzGVB7EPeB0jZdeZ1SCzYcHe2v5:u4Ue6mPeB0aNzYcHe05
- TLSH T156E2C71077F94626E7FB8B74297580988677FE673C11CE1D3898008E0A73B568A62F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Syntex Hwid Spoofer/Syntex Spoofer.exe
- Size 160KB
- SHA256 de941e4b442a45f3a6f8529165aebed643b2ce61b885e17bdff43160c518d343
- MD5 7c1455fbb229ea34f0557e6c86f28952
- SHA1 ac38e47df3fb4bf9a7f956d81c722411254cd1d7
- SHA512 d3fd741e44b00ed899872a0123c77392497827c4b43f665c873d4f22dce5f58e41968431bfc2092638495936b71d55d31db69c8c2f588931a76acd3a65be3bc5
- SSDEEP 3072:X5vnr5Tbx829UOeKnn2LFzZBp13u36wKp4zULCWods096hxpfSo:XBKjK2LFzZNfIULLD0chbZ
- TLSH T1D1F3390773A911F8D1BBE23999A24906F7B63826473197CF2350427A0F777E0AE79721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Executes dropped EXE