General
- Target REAL_hd.any_MiniRedir.bin
- Size 7.7MB
- Sample260728-2fxfjsxglc
- SHA256 0794db73759ee87450b45bde86b7ecc226e97f4dfd7cce528c975f4a4f695fcb
- MD5 43ca5acb112daaa115354352c666336e
- SHA1 1a72712f7d00b312b0d90287192e26ded0203068
- SHA512 0d67d7afea1f0958b47f99b7243e20f0e11537b7f70e645e5900b1de5024f972cb9d5cde5a04845d7d05ba747ba74bd40d0ee06ef3e141d333263ac3f961a7e9
- SSDEEP 49152:UKPtsu3n41J905r1KtZ5Pve9/halOJt+mn7+T719Z2yRJITdSP0OZcAiQGrpOSEQ:1t935J83IvtkPA
- TLSH T1FD867D67FCB518DEC466B27880237622FE663E0042163F2635E0B3795E33B61DA5E719
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
REAL_hd.any_MiniRedir.dll
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target REAL_hd.any_MiniRedir.bin
- Size 7.7MB
- SHA256 0794db73759ee87450b45bde86b7ecc226e97f4dfd7cce528c975f4a4f695fcb
- MD5 43ca5acb112daaa115354352c666336e
- SHA1 1a72712f7d00b312b0d90287192e26ded0203068
- SHA512 0d67d7afea1f0958b47f99b7243e20f0e11537b7f70e645e5900b1de5024f972cb9d5cde5a04845d7d05ba747ba74bd40d0ee06ef3e141d333263ac3f961a7e9
- SSDEEP 49152:UKPtsu3n41J905r1KtZ5Pve9/halOJt+mn7+T719Z2yRJITdSP0OZcAiQGrpOSEQ:1t935J83IvtkPA
- TLSH T1FD867D67FCB518DEC466B27880237622FE663E0042163F2635E0B3795E33B61DA5E719
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
A potential corporate email address has been identified in the URL: [email protected]
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext