General
- Target Nighty Free.exe
- Size 13.2MB
- Sample260719-ajmlzaaw4v
- SHA256 45faff7fd4f53f30627551d977d3d96748905e0e7b5649b9c78a667564cfe02a
- MD5 35f1aca96e14cb7fd56a1e57640d46ac
- SHA1 d3fb3965b158476c34ba679a53615f3023b77c6a
- SHA512 d300ef24122286697ee51fc289a3266eabaff6bfa493c0c822d78268161f369ce1ac7e7b6b8cca52e29071f3156d00e3b8ccf262959834fd2400933e8c2ed47e
- SSDEEP 393216:vjxjOv9c5hlERL5RFJzFcguYtN3ZW7p4XZ92bAJ:vdjO1EhkLhZtN3+p4pU
- TLSH T11FD63343AB2144ADE0D54631D4985479A031FA1B9734230B1F9C3F24BBEB69CADA7F72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
Nighty Free.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nighty Free.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Nighty Free.exe
- Size 13.2MB
- SHA256 45faff7fd4f53f30627551d977d3d96748905e0e7b5649b9c78a667564cfe02a
- MD5 35f1aca96e14cb7fd56a1e57640d46ac
- SHA1 d3fb3965b158476c34ba679a53615f3023b77c6a
- SHA512 d300ef24122286697ee51fc289a3266eabaff6bfa493c0c822d78268161f369ce1ac7e7b6b8cca52e29071f3156d00e3b8ccf262959834fd2400933e8c2ed47e
- SSDEEP 393216:vjxjOv9c5hlERL5RFJzFcguYtN3ZW7p4XZ92bAJ:vdjO1EhkLhZtN3+p4pU
- TLSH T11FD63343AB2144ADE0D54631D4985479A031FA1B9734230B1F9C3F24BBEB69CADA7F72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger