General
- Target tmp26shm2iu
- Size 1.5MB
- Sample260601-rjhfpagy6p
- SHA256 e9060d8b292621e011bb78329e70f9cd3127e4665af6a0bb6455b5bad7adce41
- MD5 9c7803d3894a9912b62b951721803122
- SHA1 3e2430d8c17600ef43757e71474b2fd9c2e64ceb
- SHA512 9d2a19f63964de190dfa270579956112f348506c5c9a9c9f59189b288c2b39a2740caeaaa531361edb1e9368f93d03f292a0b18efc5de62b94791ca0ecd76f4f
- SSDEEP 24576:d++SYyNULA6f6Xc+SJFqLN5as+gyYGYFNHeh0FLIJQlOOyPaj0reyahuyOdrpuT6:2sc6f6Xras+gyach0FLIJQRoaj0rejwv
- TLSH T19F65330D553062CE5064E5E79C8CC7AA60637271F91AAE370C274A3B788369FBFD513A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
tmp26shm2iu.zip
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp26shm2iu.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmp26shm2iu.zip
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
hijackloader
Attributes
-
directory
%LOCALAPPDATA%\gg2
-
inject_dll
%windir%\SysWOW64\pla.dll
xor.hex
Targets
-
- Target tmp26shm2iu
- Size 1.5MB
- SHA256 e9060d8b292621e011bb78329e70f9cd3127e4665af6a0bb6455b5bad7adce41
- MD5 9c7803d3894a9912b62b951721803122
- SHA1 3e2430d8c17600ef43757e71474b2fd9c2e64ceb
- SHA512 9d2a19f63964de190dfa270579956112f348506c5c9a9c9f59189b288c2b39a2740caeaaa531361edb1e9368f93d03f292a0b18efc5de62b94791ca0ecd76f4f
- SSDEEP 24576:d++SYyNULA6f6Xc+SJFqLN5as+gyYGYFNHeh0FLIJQlOOyPaj0reyahuyOdrpuT6:2sc6f6Xras+gyach0FLIJQRoaj0rejwv
- TLSH T19F65330D553062CE5064E5E79C8CC7AA60637271F91AAE370C274A3B788369FBFD513A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10