General
- Target libpsl-5.dll.exe
- Size 21.0MB
- Sample260729-nbd7hsselg
- SHA256 d1226435633f94e588dd20b6d15540dc18f30dcc3df1111795f24ef5d60cff06
- MD5 aee2774fd0ec1fbc101ca3e54934b53f
- SHA1 1a48791498a864ab3173abf3e8849f38314e555f
- SHA512 7e910583308692da0ca116a1223895904343fd25bee3aee52a9f02f213e3ddc9a844a8c7a656b0cfefc21bc364c05e640b741b24aa56d011d03ef004c6b9da8f
- SSDEEP 98304:UtxzNiAylev9XiQVHwKfNPh+gmABBJv2pG9jwvuLvdmbSa:UdiAVFXiu5VPh+3uL2pG9jvdmd
- TLSH T118279ED6B3C40B54D45ACB30CA2BD722C2F2F8160635D28B5BFDF6461E72B924B7A611
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
libpsl-5.dll
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
libpsl-5.dll
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target libpsl-5.dll.exe
- Size 21.0MB
- SHA256 d1226435633f94e588dd20b6d15540dc18f30dcc3df1111795f24ef5d60cff06
- MD5 aee2774fd0ec1fbc101ca3e54934b53f
- SHA1 1a48791498a864ab3173abf3e8849f38314e555f
- SHA512 7e910583308692da0ca116a1223895904343fd25bee3aee52a9f02f213e3ddc9a844a8c7a656b0cfefc21bc364c05e640b741b24aa56d011d03ef004c6b9da8f
- SSDEEP 98304:UtxzNiAylev9XiQVHwKfNPh+gmABBJv2pG9jwvuLvdmbSa:UdiAVFXiu5VPh+3uL2pG9jvdmd
- TLSH T118279ED6B3C40B54D45ACB30CA2BD722C2F2F8160635D28B5BFDF6461E72B924B7A611
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext