General
- Target 2026-04-21_01d399946022a34a347232f43eff7029_mespinoza
- Size 3.3MB
- Sample260421-1blb2sb17n
- SHA256 8759427cf0d9533c68c217a5362ce935594cdf683af5b93e776d26e2a0bd7e3c
- MD5 01d399946022a34a347232f43eff7029
- SHA1 8763b9834c420a0f66e222a88ff94f7a6d4f7b81
- SHA512 c357c58588977a4142beccb16c1fa02eadeaeda1244653ffbb40a5ed90b19f1ac79b448e1b8df53b1f1cb2eba40bac59a8fa516bea086740058c9d823a484a68
- SSDEEP 98304:pnIG3abbT0NfyqUMHuEl1kZu6ir5uhW3tciTvLqrmfohVN:pnggfwMOEl1ugroM3RTDKmfC
- TLSH T132F5339BE35E0764F4D344F48856B0E4E9AA1E901FB6145FB6DCBE8923332769B11323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-21_01d399946022a34a347232f43eff7029_mespinoza.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-21_01d399946022a34a347232f43eff7029_mespinoza.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-21_01d399946022a34a347232f43eff7029_mespinoza
- Size 3.3MB
- SHA256 8759427cf0d9533c68c217a5362ce935594cdf683af5b93e776d26e2a0bd7e3c
- MD5 01d399946022a34a347232f43eff7029
- SHA1 8763b9834c420a0f66e222a88ff94f7a6d4f7b81
- SHA512 c357c58588977a4142beccb16c1fa02eadeaeda1244653ffbb40a5ed90b19f1ac79b448e1b8df53b1f1cb2eba40bac59a8fa516bea086740058c9d823a484a68
- SSDEEP 98304:pnIG3abbT0NfyqUMHuEl1kZu6ir5uhW3tciTvLqrmfohVN:pnggfwMOEl1ugroM3RTDKmfC
- TLSH T132F5339BE35E0764F4D344F48856B0E4E9AA1E901FB6145FB6DCBE8923332769B11323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with VMProtect.
-
Suspicious use of NtSetInformationThreadHideFromDebugger