User tags
Assigned on submission by the user, not by sandbox detections.
ClearFake
General
- Target cf.any
- Size 7.7MB
- Sample260730-ybf18ayyew
- SHA256 aa506ee75e077c11866d92c36bf716f75ae3c91a69332b11cd1646c0e9fcb4ef
- MD5 83adf711deeab3979ba9071c4f3bae18
- SHA1 32ae9c3b3c788230390500d5486091cf69d0486e
- SHA512 210a2ced96994640f7809e36abd5a60af086c47374e4953fe88d45c56eecea1dd4815bf4317b6481e24e2febd186ff12bd413600ad252da06291d1912517e0c8
- SSDEEP 49152:m+iDNep3W6Xh1ON5543x9CCiYdTIZRIS7aBxD8LxRdyQTkn6TcqCHXP8pemzyw0J:uDNwIuCCiXI8nXdr
- TLSH T165868E9BE87505EFC0BDB23C84133202FE62BD0486326B5B59F0B7746E72A644B96F15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cf.dll
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target cf.any
- Size 7.7MB
- SHA256 aa506ee75e077c11866d92c36bf716f75ae3c91a69332b11cd1646c0e9fcb4ef
- MD5 83adf711deeab3979ba9071c4f3bae18
- SHA1 32ae9c3b3c788230390500d5486091cf69d0486e
- SHA512 210a2ced96994640f7809e36abd5a60af086c47374e4953fe88d45c56eecea1dd4815bf4317b6481e24e2febd186ff12bd413600ad252da06291d1912517e0c8
- SSDEEP 49152:m+iDNep3W6Xh1ON5543x9CCiYdTIZRIS7aBxD8LxRdyQTkn6TcqCHXP8pemzyw0J:uDNwIuCCiXI8nXdr
- TLSH T165868E9BE87505EFC0BDB23C84133202FE62BD0486326B5B59F0B7746E72A644B96F15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext