General
- Target tmpnegrc0re
- Size 1.5MB
- Sample260704-1jsfbses7w
- SHA256 1a29470c92958381d61437a22fbbc1e2f2e9f00c7e09a4fc0c0b9426688ae6f4
- MD5 8efcfb0c6fc85e528e6b5bb0cc186958
- SHA1 0e2c236a55c97a4dde9f848a41d2c4e7fbe8796b
- SHA512 33494d9d09daa08cc497dfd03bc879dfefbe37f3e5992dc293d8420e7ba53e9ab6989be645382d2a03be39788a397cb056b9245eb6d851dbfee422147a52a0c2
- SSDEEP 24576:qxWVeyRYVw44RE5E/jYKDB8U4jYY0td7kt+X83BOcwsQxyCCPgSO5A:q8YVw44RgEMCr16
- TLSH T14C751701BFFD8045F4B327709D754AA14A66BC22FE74C56EB688371ECBB1B414826B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tmpnegrc0re.exe
Resource
win10ltsc2021-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpnegrc0re.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpnegrc0re.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target tmpnegrc0re
- Size 1.5MB
- SHA256 1a29470c92958381d61437a22fbbc1e2f2e9f00c7e09a4fc0c0b9426688ae6f4
- MD5 8efcfb0c6fc85e528e6b5bb0cc186958
- SHA1 0e2c236a55c97a4dde9f848a41d2c4e7fbe8796b
- SHA512 33494d9d09daa08cc497dfd03bc879dfefbe37f3e5992dc293d8420e7ba53e9ab6989be645382d2a03be39788a397cb056b9245eb6d851dbfee422147a52a0c2
- SSDEEP 24576:qxWVeyRYVw44RE5E/jYKDB8U4jYY0td7kt+X83BOcwsQxyCCPgSO5A:q8YVw44RgEMCr16
- TLSH T14C751701BFFD8045F4B327709D754AA14A66BC22FE74C56EB688371ECBB1B414826B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory