General
- Target file.exe
- Size 1.5MB
- Sample260719-rnsr8aft2t
- SHA256 3ec59ae574589c01c611ba26289bc111c767d3ee56b1758d3df63a1600147019
- MD5 26bf5d63bc9d033cd52c263b2aa2ad1b
- SHA1 b0e2fe0a84bddaddddc3310511e434fa61df4ea9
- SHA512 c8b4b4e3a1e655c60dbf69cff2f5d4694c1843a13ea79e5a9764b949849cacc07a2a4916739922b1ac9e5962afc61d000e06f07af7604c973070cd36ab88dbbf
- SSDEEP 24576:9rsRcbYKNp03n4gZWmA7OABU5CpU8xPhuyHyCH+8xc9jeYu+gXTk0kyK:9rsabNNp03FWmA7O95iUUPwULH+8Ff+5
- TLSH T1A96523956BD000AAD87BA3B89AF322536775BCC517F4D3CF624082A92F239C4717B746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 1.5MB
- SHA256 3ec59ae574589c01c611ba26289bc111c767d3ee56b1758d3df63a1600147019
- MD5 26bf5d63bc9d033cd52c263b2aa2ad1b
- SHA1 b0e2fe0a84bddaddddc3310511e434fa61df4ea9
- SHA512 c8b4b4e3a1e655c60dbf69cff2f5d4694c1843a13ea79e5a9764b949849cacc07a2a4916739922b1ac9e5962afc61d000e06f07af7604c973070cd36ab88dbbf
- SSDEEP 24576:9rsRcbYKNp03n4gZWmA7OABU5CpU8xPhuyHyCH+8xc9jeYu+gXTk0kyK:9rsabNNp03FWmA7O95iUUPwULH+8Ff+5
- TLSH T1A96523956BD000AAD87BA3B89AF322536775BCC517F4D3CF624082A92F239C4717B746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Suspicious use of NtCreateUserProcessOtherParentProcess
Deletes itself
Drops startup file
Executes dropped EXE