General
- Target NFA Tool.exe
- Size 44.7MB
- Sample260624-vhd9esdx41
- SHA256 e47a996f401804affe1f3e65f95a839bb6f02385f20808bca1529f7d9980fd7c
- MD5 af775e3d924e11d0ae7d58b997764286
- SHA1 426b0b635bdd53aa54935fa2c81a731b05de4b34
- SHA512 b883cedeebec015c45e2acb2dc823246a38d95263e4c83462c1c7d42059d2995a57d09c7846ed6b562f6cbf3f394325becef785f446d8854b91b59f21d06674d
- SSDEEP 786432:POOoILVQbOglVHNOjvmLIdRN6pSKZg9LBo3B9E5WM9jnr5TdjcMo10Ug1kzGLzSk:PXJVrvo2pUg9NoX0Rr5TmMo1ik6LzE0H
- TLSH T1A4A733A0846182A1F9D3D13F565256A3B4F1B870772397DF42D8938A3D9B1F20C3E6E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
NFA Tool.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
NFA Tool.exe
Resource
win11ltsc2024-20260618-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target NFA Tool.exe
- Size 44.7MB
- SHA256 e47a996f401804affe1f3e65f95a839bb6f02385f20808bca1529f7d9980fd7c
- MD5 af775e3d924e11d0ae7d58b997764286
- SHA1 426b0b635bdd53aa54935fa2c81a731b05de4b34
- SHA512 b883cedeebec015c45e2acb2dc823246a38d95263e4c83462c1c7d42059d2995a57d09c7846ed6b562f6cbf3f394325becef785f446d8854b91b59f21d06674d
- SSDEEP 786432:POOoILVQbOglVHNOjvmLIdRN6pSKZg9LBo3B9E5WM9jnr5TdjcMo10Ug1kzGLzSk:PXJVrvo2pUg9NoX0Rr5TmMo1ik6LzE0H
- TLSH T1A4A733A0846182A1F9D3D13F565256A3B4F1B870772397DF42D8938A3D9B1F20C3E6E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.