General
- Target nidcms.zip
- Size 14KB
- Sample260705-am5a7aa18m
- SHA256 70f5f3db7f32a2399995e43a88af5540668f79547cf56422e0ed91fe2f8fb7fd
- MD5 16777863736e77711ebe6ffd38b95004
- SHA1 ffbbf00a31c28f5e2de121c6ef23b5d85ea2817e
- SHA512 348f789b2abcd92ba8a38b06ef341908b89023ba38d5c2f209602c80f0c3d2f29d82ac2c73c1c17b8d1fbbc2470abd59bb4df8a130847cf0569fcd7ab5e4be35
- SSDEEP 384:VozkMzMklSBCEAjrA6IDJETM1e2J+OXV6qVv:S5SgE6rVIlEY6qVv
- TLSH T11662AEBCFF494874C65F1F30A94A8B07D0BB474B1246F9D31C8043D58AA6287AB769B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Static task
static1
Behavioral task
behavioral1
Sample
r.ps1
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
r.ps1
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
service_nid.js
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
service_nid.js
Resource
win11ltsc2024-20260630-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target r.php
- Size 2KB
- SHA256 5a2c86ce9757dd8a6928a6370523c80cfdf2de636e601a6efd8f073a5b78a485
- MD5 02c3b064d6a30dc51af79fa26cdebab4
- SHA1 79153576510d0a0065a0966e464601783d2d931c
- SHA512 482194763b1800a5950eb8d4ab2d7648dbc00d3c261eae91d9bab8f9c77576cf1c0cefbdb9332b1381e840d581b6bafe6062dddc55bb52269ea9e4fc9f33a97e
- TLSH T1E05110A148AF0C957482D4B41BCA594470858D27570FCA107EBDB2DCBF88E7E69F839D
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target service_nid.php
- Size 4KB
- SHA256 c4139cd1d0a0a8b4012ea05d8d8f54792f43982dfd1cd2642783edd5cea02815
- MD5 49ec9229553a07430b04ebbea4fc978a
- SHA1 5cd0bd78e649ed089ce118d42a5630cdf57216d8
- SHA512 f1a7f042049a07af5436797ad7d280757b3d0187a1c267c8bcad1bfef310866f2783e1e10c87a90d307b6afecff203a26e134b81bd61444b3eceb9e994754467
- SSDEEP 96:6Xv2c6mDf7Sb57k5lTAdi6ZmkeuFKmhmYpvsK:6Xv2ODf7Wq70EmNpvsK
- TLSH T10EA194A11069503160ABC4E163A387CE30A24E03EB15E748FE6973F19F8DD7ECA5A85D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10