General
- Target 3e13c0ace9f009cd692ccbe6dde3fcd7f0efc419af8e40fcb47af3f99d36071c.exe
- Size 380KB
- Sample260727-ejskfahb58
- SHA256 3e13c0ace9f009cd692ccbe6dde3fcd7f0efc419af8e40fcb47af3f99d36071c
- MD5 34d72fc49349b9bfe03f2504b84bbb56
- SHA1 293d42eb87b9f71cef073e1f88a0030ba6b2d5aa
- SHA512 e6df70323727c87ddaa8209c94f90d9f71fcab6686439eb1c522add445793d746adba33aea4af5756ff217fdc2e858d9db20cb9da35efc5a9d19414dc8f92233
- SSDEEP 6144:BbE/HUe3Y0VKlgggggggggoFJs7oz9GeKlz7QO6KVNqZLi6M3lEMANpW2N+2uE3w:BbcVKlgggggggggoFJs0afzPqZGzlUsx
- TLSH T1AE8412B435B0E551E8A10232E425EE3E1FB89D5ED4795E8B130CBFBDBAF1683A41D102
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
3e13c0ace9f009cd692ccbe6dde3fcd7f0efc419af8e40fcb47af3f99d36071c.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
3e13c0ace9f009cd692ccbe6dde3fcd7f0efc419af8e40fcb47af3f99d36071c.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 3e13c0ace9f009cd692ccbe6dde3fcd7f0efc419af8e40fcb47af3f99d36071c.exe
- Size 380KB
- SHA256 3e13c0ace9f009cd692ccbe6dde3fcd7f0efc419af8e40fcb47af3f99d36071c
- MD5 34d72fc49349b9bfe03f2504b84bbb56
- SHA1 293d42eb87b9f71cef073e1f88a0030ba6b2d5aa
- SHA512 e6df70323727c87ddaa8209c94f90d9f71fcab6686439eb1c522add445793d746adba33aea4af5756ff217fdc2e858d9db20cb9da35efc5a9d19414dc8f92233
- SSDEEP 6144:BbE/HUe3Y0VKlgggggggggoFJs7oz9GeKlz7QO6KVNqZLi6M3lEMANpW2N+2uE3w:BbcVKlgggggggggoFJs0afzPqZGzlUsx
- TLSH T1AE8412B435B0E551E8A10232E425EE3E1FB89D5ED4795E8B130CBFBDBAF1683A41D102
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- TLSH T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10