General
- Target payload_decrypted.zip
- Size 9.4MB
- Sample260723-j8d6kathlb
- SHA256 a52af88607a268f5271ab013e586171ffa53632f70a990b01e0003dd194ef9d2
- MD5 eba019bdb87b9a348b6fae1c317a4088
- SHA1 5d984edbd5e8991578835606f1e7602314c05148
- SHA512 43b74659f09c0ff57ce11deab2b0555d714a55b412bbbe7a40e3353315eb96ad7ae720c18dac620fd545d523ea0c73c91b2f4e42e2f914b21e1201a8e0fd092b
- SSDEEP 6144:taOvKmmK1tOpXog4/dDUP4dnLM1X1Ul0Eq+dmSFfROroY1/d:tPKKdmEpOroi
- TLSH T158A6F07A0780477AF3D447C4896B341E26F5F125BAA43159A77369EFBC2A9CB803C643
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
mOPwRJOPf.cmd
Resource
win10v2004-20260513-en
5 signatures
300 seconds
Behavioral task
behavioral2
Sample
mOPwRJOPf.cmd
Resource
win10ltsc2021-20260513-en
5 signatures
300 seconds
Behavioral task
behavioral3
Sample
mOPwRJOPf.cmd
Resource
win11-20260513-en
5 signatures
300 seconds
Malware Config
Targets
-
- Target mOPwRJOPf.cmd
- Size 1KB
- SHA256 9491e8e68dfa0bb094f0f6c62fc5f6645da7abf3c02ebec3bc57dce9465af7af
- MD5 8c7d180bfe43e04dd522fe0947e88e6d
- SHA1 af2c2ae9720094af575d7cf7b8f75a77f90f0414
- SHA512 0cd726112be52dc3c5557fec691bb64d874dbeea344cdd8ba9c83e2d30bc227027bdabbb6ffba99a1946b53ab56928a7f3142530d4a8e3330e1025489b941be8
- TLSH T198217996B022452D94B473BA4B354733A30E72C33980F1BCB0A0C8AD74CF52EBA71290
- MD5 SHA1 SHA512 TLSH
Suspicious use of NtSetInformationThreadHideFromDebugger