General
- Target OS_NYZhNYK_I.V..xll
- Size 57KB
- Sample260702-kv726aez91
- SHA256 4d7cee5afd4db3a67ff629847d7b71899278e75eb362ce345b277e1bd340efe4
- MD5 78a2985f6f084bd1bea624c8dc5c17e0
- SHA1 47fdb1bba7476e3165f3cd26a805f77ab8a82272
- SHA512 6cdbbc7d7d79ebac4f703e79fb8f9184d4fdbc71111169a114ad2a932e8eb8b964080586dcd0a88c280c5b7e6edad9a4b866524b56aebb4420d5f0259ce03043
- SSDEEP 768:PUokyIo6GYRXjJYJvZ8xg+ycOORlm5UBbLO0szGqUTetDhrUprWAU:PUokvTGgEvZkROolm5UZLwxx2U
- TLSH T1C6430723E29630BEC557D03092A7AB32B5B5F44230697EBF7660DB302F61D607B1CA85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
OS_NYZhNYK_I.V..xll
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
OS_NYZhNYK_I.V..xll
Resource
win11ltsc2024-20260630-en
7 signatures
150 seconds
Malware Config
Extracted
Language
-
xlm4.0
Source
Targets
-
- Target OS_NYZhNYK_I.V..xll
- Size 57KB
- SHA256 4d7cee5afd4db3a67ff629847d7b71899278e75eb362ce345b277e1bd340efe4
- MD5 78a2985f6f084bd1bea624c8dc5c17e0
- SHA1 47fdb1bba7476e3165f3cd26a805f77ab8a82272
- SHA512 6cdbbc7d7d79ebac4f703e79fb8f9184d4fdbc71111169a114ad2a932e8eb8b964080586dcd0a88c280c5b7e6edad9a4b866524b56aebb4420d5f0259ce03043
- SSDEEP 768:PUokyIo6GYRXjJYJvZ8xg+ycOORlm5UBbLO0szGqUTetDhrUprWAU:PUokvTGgEvZkROolm5UZLwxx2U
- TLSH T1C6430723E29630BEC557D03092A7AB32B5B5F44230697EBF7660DB302F61D607B1CA85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.