General
- Target userenv.dll
- Size 1.5MB
- Sample260626-xdarjsd13s
- SHA256 4dad9264d498903d1010438255d6a4507ae7551adb79d469f8b8a4751fb7cef6
- MD5 36dab0daae1bafcea825b49c1c634a30
- SHA1 1e0deb843e948d564df7cee1e0b7ff12cf65f8be
- SHA512 c143388b1f82d5984c677137bee316d0a8d14a13bbdcb05ae47a8e143f1de1b6898f874b41a10a67fc8503050da2071885b0183167f83088dee15bdac0c418ac
- SSDEEP 24576:h8Di2DnbPzFRASCYR4iVwaqXc5s8WHbKKF4VqQ9VRQ6IHEviniHI7W:STDzWaqXc5s8W+KFSqX6Zvin
- TLSH T18B755C2EFB4251F4E22397B5854FEB7B8B1879258021EE7FFF4ACA14B4335123845296
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
userenv.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
userenv.dll
Resource
win11ltsc2024-20260618-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target userenv.dll
- Size 1.5MB
- SHA256 4dad9264d498903d1010438255d6a4507ae7551adb79d469f8b8a4751fb7cef6
- MD5 36dab0daae1bafcea825b49c1c634a30
- SHA1 1e0deb843e948d564df7cee1e0b7ff12cf65f8be
- SHA512 c143388b1f82d5984c677137bee316d0a8d14a13bbdcb05ae47a8e143f1de1b6898f874b41a10a67fc8503050da2071885b0183167f83088dee15bdac0c418ac
- SSDEEP 24576:h8Di2DnbPzFRASCYR4iVwaqXc5s8WHbKKF4VqQ9VRQ6IHEviniHI7W:STDzWaqXc5s8W+KFSqX6Zvin
- TLSH T18B755C2EFB4251F4E22397B5854FEB7B8B1879258021EE7FFF4ACA14B4335123845296
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.