General
- Target OwDumper_[unknowncheats.me]_.zip
- Size 10.9MB
- Sample260623-3artjsgz6t
- SHA256 41a395b50ff1138698165a6e53a94300fd4fa46ca88ff65236ba76754d6d0928
- MD5 6b9003e9250c3578b0428f61445bbe0b
- SHA1 cc49ae9ed6c9a67e4f5de9b273fbea4cd3c9bfab
- SHA512 89652a471f817e593c32fea8d06f6502ae8f73e7e7b4363e26b724cd09917cfa1c33caea3e8ff2a8c50b1a7e782db0203914b6d5a7a7dc081cf4f4ecaabc6496
- SSDEEP 196608:F0DJLkBNE0BwhIUsBcEnuwG5qJPYEitTHAK0wH7fM6d2lrJMbXYPs2JcMGnoJ+:F0DJL2NVwqRBc4uwG3DEgfMDrWr2sKG7
- TLSH T15FB633E2DAEADD6F76F61507415CB60ED3C10DBAC9D0AC3EB7F0A11C71A2852E785A10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
OwDumper.sys
Resource
win11-20260513-en
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
Zydis.dll
Resource
win11-20260513-en
0 signatures
300 seconds
Behavioral task
behavioral3
Sample
ow_dumper.exe
Resource
win11-20260513-en
1 signatures
300 seconds
Malware Config
Targets
-
- Target OwDumper.sys
- Size 13KB
- SHA256 2d788e972b506fd34f55e8c8c9b4545fbaf63b17391279cdef8358ba1a280b3d
- MD5 8aa37ebe410a29a247acf312939e56ab
- SHA1 03677acb25758b53228845e23708f30752b6998a
- SHA512 f2793a4c850f8eff4659e3a72a3c98db175e5c2ba2e52aa6344f2d2beff5e527ed41a834a269f58d9d58206a59e78b9b80dce4223f194fa7caba990edfdce581
- SSDEEP 192:CWdyzB9Uy61vGR17ZzEEw4tK1U93krTcJnv+vajWx0jtlAur9ZCspE+TMorpdYN/:CWdy99xLR17fbwCmcRXjWx8UHeMwM
- TLSH T1465239E339182851DD995F38C6D6CA279F74B3A11F9505CB5030C4996F86BE03B3E60A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Zydis.dll
- Size 562KB
- SHA256 f26b6eeda7b58d0734479214f1469fc51b586da6e248f06ef90a88ed10630cd0
- MD5 a0bcd6d5e6b5c73f7ace4c78fe5c0f42
- SHA1 a16f0da7b2964f60aa244ad5a6289f8a3c127234
- SHA512 937a796ab162b254e516d5d25f5bcbe57c624776645f42ab7f2020f97facbc93af3267cf2cd12fbb6bd6eb7b53ff25942ca93bd8894ada83a9ae2ca8cb0bce16
- SSDEEP 6144:BoDbjzzbUFlu9yKqYz+drzlg57mQuf6LuvofmCKYCpY+H6bNwncrg3050:K//zc3Yz+5AXufqKUtcpNJ
- TLSH T139C4C6B3EE007977EC30543459E7077B633E91A09752864B2A4C262E5DC7B942F22F9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target ow_dumper.exe
- Size 12.3MB
- SHA256 08d3b2bc8132cd7bd716bf994057c57c621216c8aca76866358587f6e446e0a1
- MD5 99350d1f72d7344f19891ab9e3f5a40e
- SHA1 5b3225edfb18b39126b8afddd507e8f5a69f677d
- SHA512 5ce88712566fbd6805aeffc488113ccfa90e70749a4d3b75466f57d5a2264981c66edfabf3bede5ef9fb46f914bd6806ca3c6d98755200a270e9574de16dfdb9
- SSDEEP 196608:Jd0Jzn0dN4uhkFe22BCsTOKwbc7Pkw2BD7sXAQJOODQPaavHlkdQFn:Jd0JznoN9kgXBC+OKwxjo9D29Hh
- TLSH T18BD612D969E0927DC451C134E28E07F9F4C979880DB94C2BBFC619116730CAAE8E6F79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger