General
- Target cmutil.dll
- Size 1.1MB
- Sample260602-mk88ksct2m
- SHA256 aec1dda47d9426cb94c2f43cf828c2948e351629c9444e1a39f5f88e676b6412
- MD5 66fe42c668d41367530ae846df0e24f0
- SHA1 fc58dd935517fdc8e36b42cd2ee9b06767e66c2f
- SHA512 1a49002a6adcb62d1a4091c051ad9e4fee8b9ceb6af2fae4cb37aa182912aae681dd1a94798a3d54ba239adbed52cd5ad1927ec344dea503cdcd1203fde37fdf
- SSDEEP 24576:TTtGscAApN3lfFb/ynC624BiLHkwhTg2iFlMddytpJU:dGsc7JFjl6roDkPFlM2p6
- TLSH T18345BE7454CC5EBFC873A0B6A75A93E9C3A3F907D53045D102AFAF8839039D987523A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cmutil.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
cmutil.dll
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target cmutil.dll
- Size 1.1MB
- SHA256 aec1dda47d9426cb94c2f43cf828c2948e351629c9444e1a39f5f88e676b6412
- MD5 66fe42c668d41367530ae846df0e24f0
- SHA1 fc58dd935517fdc8e36b42cd2ee9b06767e66c2f
- SHA512 1a49002a6adcb62d1a4091c051ad9e4fee8b9ceb6af2fae4cb37aa182912aae681dd1a94798a3d54ba239adbed52cd5ad1927ec344dea503cdcd1203fde37fdf
- SSDEEP 24576:TTtGscAApN3lfFb/ynC624BiLHkwhTg2iFlMddytpJU:dGsc7JFjl6roDkPFlM2p6
- TLSH T18345BE7454CC5EBFC873A0B6A75A93E9C3A3F907D53045D102AFAF8839039D987523A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Suspicious use of NtSetInformationThreadHideFromDebugger