General
- Target 35d4e6b8e12dc741e75dc2a602cdeddb6190cb6b634ca9933dffe826a2b8e76c
- Size 2.2MB
- Sample260719-3c8j3sat71
- SHA256 35d4e6b8e12dc741e75dc2a602cdeddb6190cb6b634ca9933dffe826a2b8e76c
- MD5 5653768791e6b42ddc6c686124e3e9b7
- SHA1 a2a3745ecc946ef79254319d8ce52d761ed9580a
- SHA512 0e0e670d331996aa128fec16e8f270df77a1b8d361c80ab287b5f37729f18a9ee5370206a9ff6755bfad75c3a2f7e7a8b41a3286ed8c07aff88531aa1100afb1
- SSDEEP 49152:kTMrVZ+lqkqJMhxMC0Joca6liub++3elmO0jgGTUXV9aIrMsr8:kTMRzxfoA4ualAfgGTMVlpr8
- TLSH T1EBB533AB658512B8CF29CFB1A5D2B9A87A237B1DDC1359936FD1E4C40FF15100DA0BB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
35d4e6b8e12dc741e75dc2a602cdeddb6190cb6b634ca9933dffe826a2b8e76c.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
35d4e6b8e12dc741e75dc2a602cdeddb6190cb6b634ca9933dffe826a2b8e76c.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 35d4e6b8e12dc741e75dc2a602cdeddb6190cb6b634ca9933dffe826a2b8e76c
- Size 2.2MB
- SHA256 35d4e6b8e12dc741e75dc2a602cdeddb6190cb6b634ca9933dffe826a2b8e76c
- MD5 5653768791e6b42ddc6c686124e3e9b7
- SHA1 a2a3745ecc946ef79254319d8ce52d761ed9580a
- SHA512 0e0e670d331996aa128fec16e8f270df77a1b8d361c80ab287b5f37729f18a9ee5370206a9ff6755bfad75c3a2f7e7a8b41a3286ed8c07aff88531aa1100afb1
- SSDEEP 49152:kTMrVZ+lqkqJMhxMC0Joca6liub++3elmO0jgGTUXV9aIrMsr8:kTMRzxfoA4ualAfgGTMVlpr8
- TLSH T1EBB533AB658512B8CF29CFB1A5D2B9A87A237B1DDC1359936FD1E4C40FF15100DA0BB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Deletes itself