General
- Target tmpaj5xhh5d
- Size 7.6MB
- Sample260601-rqrmyafv9v
- SHA256 11f6530c7bfac7fea32b4c1b6597a3a41076f39d7f58fb1514e3c3c0dd718893
- MD5 15b6def559f42d539836135ac971c90a
- SHA1 e20bb63788b0d8e932397ac0a3ad6b6fe6251f9e
- SHA512 b2d90db938e7387f93ed1892f30c512da9d520830ae45e9594e696ecca61d8a73435fc26cfc6325ad5e1728d9e07940ce42d92f522fcab48061f124671c8b868
- SSDEEP 196608:4hNHasXqGQMS8WMzIKruFjWBlq24GtIXZNacqZRu8KCCq:4isX6HMzXi5WaGtIXZs48eq
- TLSH T1EE8633B9BC53BF9D67FAF8126B1E01622BD312BF028219B163574D525B86C0CF112B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
tmpaj5xhh5d.7z
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpaj5xhh5d.7z
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpaj5xhh5d.7z
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
hijackloader
Attributes
-
directory
%APPDATA%\onv
-
inject_dll
%windir%\SysWOW64\pla.dll
xor.hex
Targets
-
- Target tmpaj5xhh5d
- Size 7.6MB
- SHA256 11f6530c7bfac7fea32b4c1b6597a3a41076f39d7f58fb1514e3c3c0dd718893
- MD5 15b6def559f42d539836135ac971c90a
- SHA1 e20bb63788b0d8e932397ac0a3ad6b6fe6251f9e
- SHA512 b2d90db938e7387f93ed1892f30c512da9d520830ae45e9594e696ecca61d8a73435fc26cfc6325ad5e1728d9e07940ce42d92f522fcab48061f124671c8b868
- SSDEEP 196608:4hNHasXqGQMS8WMzIKruFjWBlq24GtIXZNacqZRu8KCCq:4isX6HMzXi5WaGtIXZs48eq
- TLSH T1EE8633B9BC53BF9D67FAF8126B1E01622BD312BF028219B163574D525B86C0CF112B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10