General
- Target ndvy_ddoser.exe
- Size 8.3MB
- Sample260626-galrmsgz8y
- SHA256 9e46dce5e13a19569eb00dfead67a26954d4b2d9a7736b476f7dd1745f8d4daf
- MD5 03e4670befc421c5bfbcce8c25a5a947
- SHA1 1f0506acd82408a19217c30191c5512968470ada
- SHA512 7f62bf04ac39430800a29a0e98a6f349178f9caf130d00c6fb6e2a991837658e34a4e888fa881e7274440474aff3cea02240864f11c85a84e08bde5414cc8369
- SSDEEP 196608:J2C7ih0aN9vS8yKYEzcLFvuGaTz/MIHM7Hb0zlwQpNrozl:J2sC1K8tYsm1uG8EAtzlDpaz
- TLSH T15096333CD39250ECDBC761F8D8DA34F1397CBE140760C26F1156E7666AA7E9034E928A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ndvy_ddoser.exe
Resource
win10v2004-20260513-en
4 signatures
900 seconds
Behavioral task
behavioral2
Sample
ndvy_ddoser.exe
Resource
win11ltsc2024-20260618-en
6 signatures
900 seconds
Malware Config
Targets
-
- Target ndvy_ddoser.exe
- Size 8.3MB
- SHA256 9e46dce5e13a19569eb00dfead67a26954d4b2d9a7736b476f7dd1745f8d4daf
- MD5 03e4670befc421c5bfbcce8c25a5a947
- SHA1 1f0506acd82408a19217c30191c5512968470ada
- SHA512 7f62bf04ac39430800a29a0e98a6f349178f9caf130d00c6fb6e2a991837658e34a4e888fa881e7274440474aff3cea02240864f11c85a84e08bde5414cc8369
- SSDEEP 196608:J2C7ih0aN9vS8yKYEzcLFvuGaTz/MIHM7Hb0zlwQpNrozl:J2sC1K8tYsm1uG8EAtzlDpaz
- TLSH T15096333CD39250ECDBC761F8D8DA34F1397CBE140760C26F1156E7666AA7E9034E928A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Loads dropped DLL