General
- Target v1.zip
- Size 356KB
- Sample260728-rd6akahf37
- SHA256 218aa6a477d05cddc9feff947daff71873880249bedef2767f66c7614dc25813
- MD5 9a30b2913a85127128cb4cbb849b4a60
- SHA1 6f11f04796c36b30e5e6bf460d47fcfb5b3cc0a6
- SHA512 09c24991071e989fdc2225afcae9c6961bc79c5726b549c60277959e3e71205d867ac93997a0624039ef93d5ba1bac6bb3fc93f3b529a9db610773f79ad08070
- SSDEEP 6144:x85YgzOg8VewylAjN/qgdl3e20/1MqMiAN9YJFlmrJY5Ukb2rj4EYawvKz++XlGY:1ga6lElqEu20/jjC9Lramhj5MKiW+A
- TLSH T19D7423AEE850379FBE8A2AFE6406E421987D0D0FCDC1D25BF3CB94297B0F62D5164420
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
v1/nopingloader.exe
Resource
win11-20260513-en
19 signatures
300 seconds
Malware Config
Targets
-
- Target v1/nopingloader.exe
- Size 543KB
- SHA256 1f7f41521b52fb554ed6cd1466758a5d3cd479f44e71cce4ed631cad3a812f0c
- MD5 5cd92cd406403e69f832ee7c0469e36f
- SHA1 818cbf1d8765c498d887855f199acfa38845cc2a
- SHA512 ecf476b91d5354f8dd9c4eebde3274f4ffe23fedab574fc6145b751454ed3e7422ef4c32a62a9dc283ab0905f2b90869f1491ac9d0ff18a663a6d29de7fd1366
- SSDEEP 3072:HVZ1KUJ5eY2T8SYvwIb7quJOJqBmf8D3SxUM4WOKHsEM9GvMWbNPZYC1zN6zFq5:HVZ1vAZT8xoIbuuJOJH8jM49KHi6tZN
- TLSH T179C44B29F948E195C1C589B68E328893D772BF555B6C4BEB37B17FAE0E311C06A34D02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Indicator Removal: Clear Persistence
Clear artifacts associated with previously established persistence like scheduletasks on a host.