General
- Target 398ad6a1f99275e87c34ca3ee2785e31b1d4959f4e97d2ce35bf2f61d222454e
- Size 4.2MB
- Sample260727-ewcpravgpb
- SHA256 398ad6a1f99275e87c34ca3ee2785e31b1d4959f4e97d2ce35bf2f61d222454e
- MD5 ec7dbb0ba163122262fb10ef50e40ca4
- SHA1 192b52bf76463b79ecf4503d6ea08ef58d60f13e
- SHA512 6432b895a94790a92fbc2415383706d6cd34fb5b6e66bac3306645cb2aea5ceda29f507b09a2ba61a52751afdc853633a8098056ae501b4c168f9703df720109
- SSDEEP 49152:x0pWonHpq3QSOgR4HykKxuGkEjyFhHF3RtOGzCBPiG2X:x0pnwQtKxutEjqDbtX
- TLSH T185269D47BEA16975C49DA33289B60201B739BC0E8B3633E72D91A6793F723C19D75B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
398ad6a1f99275e87c34ca3ee2785e31b1d4959f4e97d2ce35bf2f61d222454e.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
398ad6a1f99275e87c34ca3ee2785e31b1d4959f4e97d2ce35bf2f61d222454e.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 398ad6a1f99275e87c34ca3ee2785e31b1d4959f4e97d2ce35bf2f61d222454e
- Size 4.2MB
- SHA256 398ad6a1f99275e87c34ca3ee2785e31b1d4959f4e97d2ce35bf2f61d222454e
- MD5 ec7dbb0ba163122262fb10ef50e40ca4
- SHA1 192b52bf76463b79ecf4503d6ea08ef58d60f13e
- SHA512 6432b895a94790a92fbc2415383706d6cd34fb5b6e66bac3306645cb2aea5ceda29f507b09a2ba61a52751afdc853633a8098056ae501b4c168f9703df720109
- SSDEEP 49152:x0pWonHpq3QSOgR4HykKxuGkEjyFhHF3RtOGzCBPiG2X:x0pnwQtKxutEjqDbtX
- TLSH T185269D47BEA16975C49DA33289B60201B739BC0E8B3633E72D91A6793F723C19D75B04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Suspicious use of NtSetInformationThreadHideFromDebugger