General
- Target tmpu78djo7h
- Size 6.8MB
- Sample260601-rm127sft7w
- SHA256 a94ac18f45e765daaeccfd9547ba597da29a0bbe4d632173c9c24fb1079087cc
- MD5 60647ae6938fda042fa6635b957cec59
- SHA1 9d5af7d489f81164deb9cb06f313ef916c44fc46
- SHA512 b71384f3459517a7c8287d585e1b30ae742cf235dbd773ddd96405628e02204a7f737e02888bf915e8f3868a507d3e1874b4dbe5ae790779c8c018cc8ceadafc
- SSDEEP 196608:8WGI7CW8cOC9VIxCqcI0Lge4aotb2b19sqGMat:n38ch0xCK0Ee4a4U19S
- TLSH T19C76331EA4468E5A8E05A9A070BE42390C27C537D3F2B6354E7CEA51D4BCF75E34268F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
tmpu78djo7h.zip
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpu78djo7h.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpu78djo7h.zip
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
hijackloader
Attributes
-
directory
%APPDATA%\Mopac
-
inject_dll
%windir%\SysWOW64\pla.dll
xor.hex
Targets
-
- Target tmpu78djo7h
- Size 6.8MB
- SHA256 a94ac18f45e765daaeccfd9547ba597da29a0bbe4d632173c9c24fb1079087cc
- MD5 60647ae6938fda042fa6635b957cec59
- SHA1 9d5af7d489f81164deb9cb06f313ef916c44fc46
- SHA512 b71384f3459517a7c8287d585e1b30ae742cf235dbd773ddd96405628e02204a7f737e02888bf915e8f3868a507d3e1874b4dbe5ae790779c8c018cc8ceadafc
- SSDEEP 196608:8WGI7CW8cOC9VIxCqcI0Lge4aotb2b19sqGMat:n38ch0xCK0Ee4a4U19S
- TLSH T19C76331EA4468E5A8E05A9A070BE42390C27C537D3F2B6354E7CEA51D4BCF75E34268F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10