General
- Target HDNUIDBYPASSV3.2.exe
- Size 3.1MB
- Sample260705-bfjxcabv7k
- SHA256 05b05fec579315e2db67cd25f5a964080aaf0eb8ba991304a8158bfdc8fe42cf
- MD5 b8d2b4d41dd2641b7de8c93e246d3df5
- SHA1 295a54e726cfec349238846289c70063e79e32e8
- SHA512 ba64c0494f7dbec2965044c62b33762a061c94bc6dc23d58bfc1ab96084020e25d64b892e8aba0bf71e30a392506c2bfac4457a32229886697b62009a5e55b72
- SSDEEP 98304:E+sKTPaNNkkIjMyCOo8ZCDrbh9APvGGT:EPKPa/kktybPwnNyvP
- TLSH T13FE5012C31A069D7E45F5A77C83251B001BC6F03D2903F6E9A4FE90AE575EE9F922E41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HDNUIDBYPASSV3.2.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
HDNUIDBYPASSV3.2.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target HDNUIDBYPASSV3.2.exe
- Size 3.1MB
- SHA256 05b05fec579315e2db67cd25f5a964080aaf0eb8ba991304a8158bfdc8fe42cf
- MD5 b8d2b4d41dd2641b7de8c93e246d3df5
- SHA1 295a54e726cfec349238846289c70063e79e32e8
- SHA512 ba64c0494f7dbec2965044c62b33762a061c94bc6dc23d58bfc1ab96084020e25d64b892e8aba0bf71e30a392506c2bfac4457a32229886697b62009a5e55b72
- SSDEEP 98304:E+sKTPaNNkkIjMyCOo8ZCDrbh9APvGGT:EPKPa/kktybPwnNyvP
- TLSH T13FE5012C31A069D7E45F5A77C83251B001BC6F03D2903F6E9A4FE90AE575EE9F922E41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.