General
- Target perfhost.exe_pw_infected.zip
- Size 570KB
- Sample260423-ej2s4sat4s
- SHA256 f132f559dea1c652ab418cc3b2538b43eeaa3a0d4ed2461d8d86f2ecbbdf2675
- MD5 e4ea05334bdf1fe5c60afbdba1acdf9d
- SHA1 42bc87d07d9aa3fe4f3e791db91169b61039e7db
- SHA512 8a8ff3b691da6436f9bd0488fc4334e2a98ba39459292a2ab89f6a6bd5a76cd02a5143ec6b82d6e34f5274a21682393712ea9924ab6a776bb9d5c8aaeeac0f7d
- SSDEEP 12288:2wq528ROwBmREdZeaVwM0TrXz+oCzSDgPtYH55OBkJz2n:AgC1kuZFw7XClzSDStc5Omm
- TLSH T147C423FB365976D3D562617B318F9C29F87A01DBD03CA2A693044A7E420F3CA1B5ED48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
perfhost.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
perfhost.exe
Resource
win10ltsc2021-20260126-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
perfhost.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target perfhost.exe
- Size 1.2MB
- SHA256 fa2ebd50fc92731389d66fd4c767e4e6536be962bc2df4e79552d044ed39eb65
- MD5 2030b168b3d05f700b72f358c23e368c
- SHA1 8d5d6e9b1552cb1a568092fc9a196729030d9851
- SHA512 61d237416d91166e4621e827b5a973222eae459f05d8faaa9a3658111538e4d201111e4ff00359d54a3f21651b128b5c47fd9a1d92fb43cedd7b3358e5ce3ce6
- SSDEEP 12288:Z234XiPvrLr0Ci41UO5wHPdjIpTEx/Mz0gLeAfsVyqBn9r2ilH:ZtSnnrFb4PM4MYgLxEVyGLJ
- TLSH T1F34523676BDC14EFCFBD16B081A596D8B20A7831FE61F10FB740741A3A3A6499CA1317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Drops file in System32 directory