General
- Target tmpa5mhto7j
- Size 7.3MB
- Sample260601-rtnepafx3t
- SHA256 0e25c3c244e6dd54e8aa5a56f1a2574a992c85920ebf321a4223513734e8b2b6
- MD5 c85e06ff9b154fc3d7f0659234beac46
- SHA1 f4df2675fcf05fe8888f3e9833b22115e749a445
- SHA512 ba611a1c3b36ef1c51bfa7fed092b39dc7876345b66d1ec014d6b52a2a5e381a3101a9c66b40e6a86bc4f18c3c8ae23645d8e907f79a3a934d991882796f0e4c
- SSDEEP 196608:J1AXXrfrc45H/RRldlR9e4FGR2eCxzV1AR4ytYRYm3X:J14XrDc45fNdD04FGR2FxzcKytYamn
- TLSH T1AF76333EB50C13B9F77BBA0EB606974391FF5B8466E84866B43A2D101B0D05C3A5F8D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
tmpa5mhto7j.zip
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpa5mhto7j.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpa5mhto7j.zip
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
hijackloader
Attributes
-
directory
%APPDATA%\driversystemylc
-
inject_dll
%windir%\SysWOW64\pla.dll
xor.hex
Targets
-
- Target tmpa5mhto7j
- Size 7.3MB
- SHA256 0e25c3c244e6dd54e8aa5a56f1a2574a992c85920ebf321a4223513734e8b2b6
- MD5 c85e06ff9b154fc3d7f0659234beac46
- SHA1 f4df2675fcf05fe8888f3e9833b22115e749a445
- SHA512 ba611a1c3b36ef1c51bfa7fed092b39dc7876345b66d1ec014d6b52a2a5e381a3101a9c66b40e6a86bc4f18c3c8ae23645d8e907f79a3a934d991882796f0e4c
- SSDEEP 196608:J1AXXrfrc45H/RRldlR9e4FGR2eCxzV1AR4ytYRYm3X:J14XrDc45fNdD04FGR2FxzcKytYamn
- TLSH T1AF76333EB50C13B9F77BBA0EB606974391FF5B8466E84866B43A2D101B0D05C3A5F8D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10