General
- Target 07.22Document details.zip
- Size 4.2MB
- Sample260722-nc3lhaeb28
- SHA256 144eac3a8a511f00cbe62fb4ed52b050a8c189a89ac6c7d3228391777076abae
- MD5 cdc01c1d721ae59ccab42fe8389f1435
- SHA1 1b5d21189ce58f4cc457a2ad9a88bbccd12d72c4
- SHA512 c82b6f8c4df18c8491214a351f7f2b496e8c378df08d899ba9e12d45a506fadecd88fe635e145a3981c7f016737a8f0d6b7f67cdd97b7dcf782d2ecfde2a97b6
- SSDEEP 98304:TL04Pi6i2UFCKa9kUTk7wO/q+c8KN9keE+UWLpcHMOOGcKPPv43+3cNPLI:TL04Pfi20aKUBIq+c8KN9kfspqXcKHvZ
- TLSH T1F026331DE227B50F4CF58FB825F0E9BB03BA5AEE07865C9CE139E6F565DA3780161018
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
07.22Document details.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
07.22Document details.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
arphaDump64.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
arphaDump64.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 07.22Document details.exe
- Size 232KB
- SHA256 e743e8fac075a379161e1736388451e0af0fde7da595ea9d15eeb5140e3e8271
- MD5 8b5d51df7bbd67aeb51e9b9dee6bc84a
- SHA1 dd63c3d4acf0ce27f71cce44b8950180e48e36fa
- SHA512 1b4350d51c2107d0aa22eb01d64e1f1ab73c28114045c388baf9547cc39a902c8a274a24479c7c2599f94c96f8772e438f21a2849316b5bd7f5d47c26a1e483b
- SSDEEP 3072:fN9rZ5vuFomptSepjTxUPjfOgwXCtRLDya09M9EvoHmkQ/2Y8L6vVefD:rZ5qomPSeCx7tRNQjSfD
- TLSH T118345B5632E40CF9E5BB813889528A16FA7374113762DADF026443BD7F237D1AE39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-
- Target arphaDump64.dll
- Size 4.2MB
- SHA256 6cca09a2d75f2b362f5352a138ca7c30541657929c02976368be83e2932ec3b9
- MD5 c4efa99f277b26360eef93893a8f4abc
- SHA1 71a9ca2bfbcb8ca6dfe3f86c022a95ab46bbc974
- SHA512 2808ffbb5729ee7758f5bf41b2f24240e51518f49d12a12b19553e7e948e208dc26ab338498ee27478786eba5f258cd6802f3cfb3a5524ae648e28af71cc0822
- SSDEEP 98304:K8vI1WadOBfKP4QT41wUbqTA0AxVSYIuU+LzmTOYOM2IJ7lETr3dwBkR173:K8vIIaTgQ1Oqk0AxVSN4zwl2IdlUNbR
- TLSH T11C161235E2D604F8E0A7E2F4D866D5C7DAB37C9683F0569F23D58A094F672500AB7322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10