General
- Target 0e3dff1f123d98f70c8cd6b7ae7c2f7c5b92a29365e6d7fd29ecb77c34b1a93b
- Size 2.5MB
- Sample260719-3absbsh181
- SHA256 0e3dff1f123d98f70c8cd6b7ae7c2f7c5b92a29365e6d7fd29ecb77c34b1a93b
- MD5 6b680238f7bb5a1feeb5e5b3d6842d4a
- SHA1 20382ed7001160f314a3d477284c0d0d20a77bcb
- SHA512 6f1e7e2dc7c8dab15e4bb9720f4ad98291d842043577847b2c2af8e9e7ad36543322e16669a729dc506634461718d8fe6fed9a2248f48ca7e335fd5fc8dd3fa5
- SSDEEP 49152:lVE59K8kWZ2jCdgf0I1r3Iuzwu0WAHPjMAEEPEcaDOQoqReAt1S/0+9:lVakvCdBI2rvSqEcKzoMzTSs+9
- TLSH T158C5238258D9C0BBC7F5873159F70495B08B3A4C8D8B49C73BD4EC1676B28EB2B97648
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0e3dff1f123d98f70c8cd6b7ae7c2f7c5b92a29365e6d7fd29ecb77c34b1a93b.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
0e3dff1f123d98f70c8cd6b7ae7c2f7c5b92a29365e6d7fd29ecb77c34b1a93b.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 0e3dff1f123d98f70c8cd6b7ae7c2f7c5b92a29365e6d7fd29ecb77c34b1a93b
- Size 2.5MB
- SHA256 0e3dff1f123d98f70c8cd6b7ae7c2f7c5b92a29365e6d7fd29ecb77c34b1a93b
- MD5 6b680238f7bb5a1feeb5e5b3d6842d4a
- SHA1 20382ed7001160f314a3d477284c0d0d20a77bcb
- SHA512 6f1e7e2dc7c8dab15e4bb9720f4ad98291d842043577847b2c2af8e9e7ad36543322e16669a729dc506634461718d8fe6fed9a2248f48ca7e335fd5fc8dd3fa5
- SSDEEP 49152:lVE59K8kWZ2jCdgf0I1r3Iuzwu0WAHPjMAEEPEcaDOQoqReAt1S/0+9:lVakvCdBI2rvSqEcKzoMzTSs+9
- TLSH T158C5238258D9C0BBC7F5873159F70495B08B3A4C8D8B49C73BD4EC1676B28EB2B97648
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess