General
- Target vstvjd.smkn7bandung.com_00f2f18e-f739-47c3-a68e-425aa333e006_fldajbnuxlziajxgrstr.dll_Microsoft-WebDAV-MiniRedir_10.0.19045.bin
- Size 7.7MB
- Sample260728-2axt5axfjh
- SHA256 7432ae64397ec1e3a4b42e8a2a642b2fb19ede6f51a0aad969881d35dd609daf
- MD5 75935d03cc8b63a2462628c1396b297c
- SHA1 9693d64e4292ea84faf758d5793dc9cd2cd5b6b7
- SHA512 539fdf3e1c46411fa35ca87b81415513cbffc55c226365081895e2ab1b145c0cd5d986cc190a96462dc703e621e0bef7f2bd1ceb6b7e45899896b2405e1e3ec0
- SSDEEP 49152:R366eysbK7KvtHnk4W8W2DsbDTUwGkNu4Xcbe7V92JM2j4RZQfwlYnsFd9+tXVK+:htu+UwTVSURZVxG
- TLSH T117867D1BE9B614DEC06BA23980237612BE527D0056162B2769D4B77C1F33BA1275FF2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
vstvjd.smkn7bandung.com_00f2f18e-f739-47c3-a68e-425aa333e006_fldajbnuxlziajxgrstr.dll_Microsoft-WebDAV-MiniRedir_10.0.19045.dll
Resource
win10v2004-20260513-en
14 signatures
30 seconds
Behavioral task
behavioral2
Sample
vstvjd.smkn7bandung.com_00f2f18e-f739-47c3-a68e-425aa333e006_fldajbnuxlziajxgrstr.dll_Microsoft-WebDAV-MiniRedir_10.0.19045.dll
Resource
win11ltsc2024-20260709-en
5 signatures
30 seconds
Malware Config
Targets
-
- Target vstvjd.smkn7bandung.com_00f2f18e-f739-47c3-a68e-425aa333e006_fldajbnuxlziajxgrstr.dll_Microsoft-WebDAV-MiniRedir_10.0.19045.bin
- Size 7.7MB
- SHA256 7432ae64397ec1e3a4b42e8a2a642b2fb19ede6f51a0aad969881d35dd609daf
- MD5 75935d03cc8b63a2462628c1396b297c
- SHA1 9693d64e4292ea84faf758d5793dc9cd2cd5b6b7
- SHA512 539fdf3e1c46411fa35ca87b81415513cbffc55c226365081895e2ab1b145c0cd5d986cc190a96462dc703e621e0bef7f2bd1ceb6b7e45899896b2405e1e3ec0
- SSDEEP 49152:R366eysbK7KvtHnk4W8W2DsbDTUwGkNu4Xcbe7V92JM2j4RZQfwlYnsFd9+tXVK+:htu+UwTVSURZVxG
- TLSH T117867D1BE9B614DEC06BA23980237612BE527D0056162B2769D4B77C1F33BA1275FF2C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext