General
- Target 1d313d369d52d346d5a29ccc248de32ae5481101f45c4198e6c2eff1447a2aa4_nethost.dll.exe
- Size 102KB
- Sample260420-2zbcese12m
- SHA256 1d313d369d52d346d5a29ccc248de32ae5481101f45c4198e6c2eff1447a2aa4
- MD5 a9572d21a0e9fe79e85eaae3cdd92a14
- SHA1 09e3fb2e363916406d670b1951605c67952eec43
- SHA512 504d5e3999c1758778c0d2e8ec93a4acc063d63e70f65bd0b80eb5f1938d16b789bf4e6548f44dab0083629e3acbd74d5e9dbdb26d207c04f0c097fff4526cd8
- SSDEEP 3072:atd4yN6xpAqJQVAvfhxt/rB7ijPGyuIWC+vm//O/2iePL3zfbHsYrXTGWwd51pyQ:+dJkTB4Anh/6XJsl
- TLSH T185A3495B72EA40BBE1B68638C4630A09D772B8560761AFEF43A4425E1F237D18D3DF61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1d313d369d52d346d5a29ccc248de32ae5481101f45c4198e6c2eff1447a2aa4_nethost.dll
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1d313d369d52d346d5a29ccc248de32ae5481101f45c4198e6c2eff1447a2aa4_nethost.dll
Resource
win11-20260130-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 1d313d369d52d346d5a29ccc248de32ae5481101f45c4198e6c2eff1447a2aa4_nethost.dll.exe
- Size 102KB
- SHA256 1d313d369d52d346d5a29ccc248de32ae5481101f45c4198e6c2eff1447a2aa4
- MD5 a9572d21a0e9fe79e85eaae3cdd92a14
- SHA1 09e3fb2e363916406d670b1951605c67952eec43
- SHA512 504d5e3999c1758778c0d2e8ec93a4acc063d63e70f65bd0b80eb5f1938d16b789bf4e6548f44dab0083629e3acbd74d5e9dbdb26d207c04f0c097fff4526cd8
- SSDEEP 3072:atd4yN6xpAqJQVAvfhxt/rB7ijPGyuIWC+vm//O/2iePL3zfbHsYrXTGWwd51pyQ:+dJkTB4Anh/6XJsl
- TLSH T185A3495B72EA40BBE1B68638C4630A09D772B8560761AFEF43A4425E1F237D18D3DF61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Adds Run key to start application