General
- Target SecuriteInfo.com.Win64.MalwareX-gen.65897296.exe
- Size 4.5MB
- Sample260420-mwkpcscs2v
- SHA256 73a95157bef5cfb8dc294e905b8c0d8e750bb7b18ed374e70307b1cdcecf9172
- MD5 ed3f564b0730a2b8995f052befa5f12c
- SHA1 d736f95c557ed734e060a6535c5ea940c42dc20a
- SHA512 b194c03fb2edb556dc1e777fb513c435f76359e5359ec382beeeb4eae13c2376bca0f754af2dea8a2f68190ffc5022718f6e8fb7cd95c3b6fb5e1b41f732f243
- SSDEEP 49152:AEZigVGgO6P/9Ar+IP8Q8muFNeGVVQcrhepxtwjcwQcxhWTU:AXp8m98m/b1yWY
- TLSH T18D269F1BBDB95869C09AF1388473A705F565B8451B1227C71AB0F22C2F3B7F05AF9B18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win64.MalwareX-gen.65897296.dll
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win64.MalwareX-gen.65897296.dll
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.Win64.MalwareX-gen.65897296.exe
- Size 4.5MB
- SHA256 73a95157bef5cfb8dc294e905b8c0d8e750bb7b18ed374e70307b1cdcecf9172
- MD5 ed3f564b0730a2b8995f052befa5f12c
- SHA1 d736f95c557ed734e060a6535c5ea940c42dc20a
- SHA512 b194c03fb2edb556dc1e777fb513c435f76359e5359ec382beeeb4eae13c2376bca0f754af2dea8a2f68190ffc5022718f6e8fb7cd95c3b6fb5e1b41f732f243
- SSDEEP 49152:AEZigVGgO6P/9Ar+IP8Q8muFNeGVVQcrhepxtwjcwQcxhWTU:AXp8m98m/b1yWY
- TLSH T18D269F1BBDB95869C09AF1388473A705F565B8451B1227C71AB0F22C2F3B7F05AF9B18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Suspicious use of NtCreateUserProcessOtherParentProcess
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Suspicious use of NtSetInformationThreadHideFromDebugger