General
- Target tmprin4oekj
- Size 5.3MB
- Sample260601-rtccesfx2x
- SHA256 d0c05c47ca56329eb65d220b90f65583732ed5873ea318f170a3be3f4b2292d8
- MD5 aae3067578dbdfa7acb7cb8fcbbe5cd1
- SHA1 b05df97ea22c167a6a1553071db54a3edfc71bd2
- SHA512 1c7e74dda9c5969f83f1ec27cdbe856eb491a9ddb975eb7ad5fb9c335f6e43079f1b7bb3fbb7477d4fa428a1240dfec83d6ac135ead829029bb63c098fb76960
- SSDEEP 98304:R89yy48vPGo8K4/u3W8aXFOFlUceXaFDSDNaXhu6P07KmtzDwdrtmSGj4sjwPCtV:R8AKUWGFPhNaXujFDert9sjKCto0FN
- TLSH T13D46339D430B9B33F0E1AA51B4944C96F86FA603D3E51F901B12A957B409BEB0EC39DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
tmprin4oekj.zip
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmprin4oekj.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmprin4oekj.zip
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
hijackloader
Attributes
-
directory
%APPDATA%\writerFirefox
-
inject_dll
%windir%\SysWOW64\pla.dll
xor.hex
Targets
-
- Target tmprin4oekj
- Size 5.3MB
- SHA256 d0c05c47ca56329eb65d220b90f65583732ed5873ea318f170a3be3f4b2292d8
- MD5 aae3067578dbdfa7acb7cb8fcbbe5cd1
- SHA1 b05df97ea22c167a6a1553071db54a3edfc71bd2
- SHA512 1c7e74dda9c5969f83f1ec27cdbe856eb491a9ddb975eb7ad5fb9c335f6e43079f1b7bb3fbb7477d4fa428a1240dfec83d6ac135ead829029bb63c098fb76960
- SSDEEP 98304:R89yy48vPGo8K4/u3W8aXFOFlUceXaFDSDNaXhu6P07KmtzDwdrtmSGj4sjwPCtV:R8AKUWGFPhNaXujFDert9sjKCto0FN
- TLSH T13D46339D430B9B33F0E1AA51B4944C96F86FA603D3E51F901B12A957B409BEB0EC39DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10