General
- Target 0xDnID1YdbRyOCxB.exe
- Size 48.9MB
- Sample260707-b2jhpsft61
- SHA256 a871d7f60c493cfc50a5995fd8f2035de069f9ef5c7cbdb42482cba4ca7d386a
- MD5 3346d690807e15ee7633cf093ef56d38
- SHA1 b80c4560cea8216c4cfd8f87795596202f950774
- SHA512 1bef4fa9203eccdf30e702cc3ec54357e847f04ee95b2cdbbf62faf292f6b8383ccb18b976f4bc97499da5b03b802dae1492180c67b1836e66a93c5a26fb5d07
- SSDEEP 786432:XXtwTgMVELFfOmNwa1iHZf00ngKkk45fGuPt+CzhqfDZKHSAiLOB3UX3MM:HGVELFflNbLfkGlHhA37
- TLSH T1ACB7332539C962A8E0C386342AD76156F1D8F567AAEF8D0E28C65C023770C17DF87A77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0xDnID1YdbRyOCxB.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 0xDnID1YdbRyOCxB.exe
- Size 48.9MB
- SHA256 a871d7f60c493cfc50a5995fd8f2035de069f9ef5c7cbdb42482cba4ca7d386a
- MD5 3346d690807e15ee7633cf093ef56d38
- SHA1 b80c4560cea8216c4cfd8f87795596202f950774
- SHA512 1bef4fa9203eccdf30e702cc3ec54357e847f04ee95b2cdbbf62faf292f6b8383ccb18b976f4bc97499da5b03b802dae1492180c67b1836e66a93c5a26fb5d07
- SSDEEP 786432:XXtwTgMVELFfOmNwa1iHZf00ngKkk45fGuPt+CzhqfDZKHSAiLOB3UX3MM:HGVELFflNbLfkGlHhA37
- TLSH T1ACB7332539C962A8E0C386342AD76156F1D8F567AAEF8D0E28C65C023770C17DF87A77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger