General
- Target tmp5ccud765
- Size 7.7MB
- Sample260601-rssysaht2j
- SHA256 27a6ce271f7c798592dabbe5a7e0249190222595575119b9fd7c931d80019628
- MD5 ba85897da1d86c29127571f05cdcf4b1
- SHA1 9e54a57e674d25484a4eae0a7bbbf5a2fb781ab8
- SHA512 efebdb4c2a09992a1ad23939c7acf593ae1261bf5c3baf4a03f6956ac9e54ea03735ee3ce2b3ffaf86e4ef9ae8e58e9f7dd2cfe5890cf691f2dae065575b241a
- SSDEEP 196608:4x8vzhX5x98lZMH5B5ORRkfaYbJ79BGgzOEf6x:4ivzhX5TlB5kRkTbR9Fzv6x
- TLSH T1E486335EC2BF77C55AB2ADFE58F95FB7329595A3C2322A000D5DB210563237C325A28C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
tmp5ccud765.zip
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp5ccud765.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmp5ccud765.zip
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
hijackloader
Attributes
-
directory
%APPDATA%\syncfast
-
inject_dll
%windir%\SysWOW64\pla.dll
xor.hex
Targets
-
- Target tmp5ccud765
- Size 7.7MB
- SHA256 27a6ce271f7c798592dabbe5a7e0249190222595575119b9fd7c931d80019628
- MD5 ba85897da1d86c29127571f05cdcf4b1
- SHA1 9e54a57e674d25484a4eae0a7bbbf5a2fb781ab8
- SHA512 efebdb4c2a09992a1ad23939c7acf593ae1261bf5c3baf4a03f6956ac9e54ea03735ee3ce2b3ffaf86e4ef9ae8e58e9f7dd2cfe5890cf691f2dae065575b241a
- SSDEEP 196608:4x8vzhX5x98lZMH5B5ORRkfaYbJ79BGgzOEf6x:4ivzhX5TlB5kRkTbR9Fzv6x
- TLSH T1E486335EC2BF77C55AB2ADFE58F95FB7329595A3C2322A000D5DB210563237C325A28C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10