General
- Target tmpbdwfd8cl
- Size 15.8MB
- Sample260601-rnk3dafv2s
- SHA256 3a153b9c49cabd05d1287442a90588e777804a06cd68e666baa4f6a3f19b37c5
- MD5 bc5b6fd093000ff038c276609b956f79
- SHA1 8f2476eb9fd8ae6fe2536831ef6d8e7a8e2bcdd5
- SHA512 fac67173a597ec32c04889e86c819d51914c98946077754da2110ef3cf2e1ce4d67596c0ebc72ae892fedcdc3f036a27c39aa727a3a28426107a91b5aa3c5f65
- SSDEEP 393216:2WS5roxovv4coMbKj9T9wgIQ2FlJe9AdJ12NV83g3K9:2WiMo4LOKj194Q2Je96D48w3M
- TLSH T137F633E6FBD0EDC67D3F11291A69B918ECE5F00AB9940A027AF41C769DAD7CD113B801
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
tmpbdwfd8cl.zip
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpbdwfd8cl.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpbdwfd8cl.zip
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
hijackloader
Attributes
-
directory
%APPDATA%\tcur
-
inject_dll
%windir%\SysWOW64\pla.dll
xor.hex
Targets
-
- Target tmpbdwfd8cl
- Size 15.8MB
- SHA256 3a153b9c49cabd05d1287442a90588e777804a06cd68e666baa4f6a3f19b37c5
- MD5 bc5b6fd093000ff038c276609b956f79
- SHA1 8f2476eb9fd8ae6fe2536831ef6d8e7a8e2bcdd5
- SHA512 fac67173a597ec32c04889e86c819d51914c98946077754da2110ef3cf2e1ce4d67596c0ebc72ae892fedcdc3f036a27c39aa727a3a28426107a91b5aa3c5f65
- SSDEEP 393216:2WS5roxovv4coMbKj9T9wgIQ2FlJe9AdJ12NV83g3K9:2WiMo4LOKj194Q2Je96D48w3M
- TLSH T137F633E6FBD0EDC67D3F11291A69B918ECE5F00AB9940A027AF41C769DAD7CD113B801
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10