General
- Target TrustedCMD.exe
- Size 107KB
- Sample260622-lp4cfsbt4s
- SHA256 4182ee8eb8bc9aa8517d9305ffe424b396d1ed758d33df02a9ce2aec46d8c13d
- MD5 f0768b5d89e0cdbe41a4aff2545fe659
- SHA1 5cfb21126913a6a92ba7a917fbf0af35bea307ef
- SHA512 31ebb3c359444f66c450902b6dc413f15a776743b9227874d481041cf9574645f18b81a90cad9d1d23ff662488f23e0e61c03f2a2be1c78b38bbae582ea5a748
- SSDEEP 1536:jHHncBJKJvjT++Foj5nJBbGPcHtZ3yhTh4hcnBwEIh3K67upQjV4cGrnydmTMhMq:jH8BJ+vPoVnJBR3kol
- TLSH T128B3C5D077D51C99EA65627C59F682327B7CF9E08523DB1F5120B2321E22EC02DDA73A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TrustedCMD.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
TrustedCMD.exe
Resource
win11ltsc2024-20260617-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target TrustedCMD.exe
- Size 107KB
- SHA256 4182ee8eb8bc9aa8517d9305ffe424b396d1ed758d33df02a9ce2aec46d8c13d
- MD5 f0768b5d89e0cdbe41a4aff2545fe659
- SHA1 5cfb21126913a6a92ba7a917fbf0af35bea307ef
- SHA512 31ebb3c359444f66c450902b6dc413f15a776743b9227874d481041cf9574645f18b81a90cad9d1d23ff662488f23e0e61c03f2a2be1c78b38bbae582ea5a748
- SSDEEP 1536:jHHncBJKJvjT++Foj5nJBbGPcHtZ3yhTh4hcnBwEIh3K67upQjV4cGrnydmTMhMq:jH8BJ+vPoVnJBR3kol
- TLSH T128B3C5D077D51C99EA65627C59F682327B7CF9E08523DB1F5120B2321E22EC02DDA73A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess