General
- Target tmpifqu75w8
- Size 15.2MB
- Sample260601-qext5sdt6v
- SHA256 04497711f8975aedb376a1d904699e153b51d43a1c5809958ff0a857c7b42078
- MD5 175ad1e041cb022a6abb7f6e4759aef8
- SHA1 3faa639ebabfcf233ca1bd3f821e6befd730babc
- SHA512 3d97f57d814f3c364ae88da2db327ef85a3706b8792e6187c8194860f83c8d18ff8846e88b888968f614726dabfe518bf9e409a25631c53d5350e20976ad548a
- SSDEEP 393216:TEwohg1F7+qJ7xvMwuobgC1eh4yXk4uobgC8yXdc2t27+8H9eT:TOhg1F7+UVk1ocwehdk9ocEd87+8C
- TLSH T17BF63382F1D5E21FF1A1203AF15199628EB8D3815E2BB5AFB384040CDAD96C2A57D7D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
tmpifqu75w8.zip
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpifqu75w8.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpifqu75w8.zip
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
hijackloader
Attributes
-
directory
%APPDATA%\channelTlsDxn_x64
-
inject_dll
%windir%\SysWOW64\pla.dll
xor.hex
xor.hex
xor.hex
xor.hex
Targets
-
- Target tmpifqu75w8
- Size 15.2MB
- SHA256 04497711f8975aedb376a1d904699e153b51d43a1c5809958ff0a857c7b42078
- MD5 175ad1e041cb022a6abb7f6e4759aef8
- SHA1 3faa639ebabfcf233ca1bd3f821e6befd730babc
- SHA512 3d97f57d814f3c364ae88da2db327ef85a3706b8792e6187c8194860f83c8d18ff8846e88b888968f614726dabfe518bf9e409a25631c53d5350e20976ad548a
- SSDEEP 393216:TEwohg1F7+qJ7xvMwuobgC1eh4yXk4uobgC8yXdc2t27+8H9eT:TOhg1F7+UVk1ocwehdk9ocEd87+8C
- TLSH T17BF63382F1D5E21FF1A1203AF15199628EB8D3815E2BB5AFB384040CDAD96C2A57D7D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10