General
- Target 0f377e7dcc400928c137872cffe5fade1a23fbfe4fb0caca36978e4fa8f0f10e
- Size 7.5MB
- Sample260731-mftmbs1vcs
- SHA256 0f377e7dcc400928c137872cffe5fade1a23fbfe4fb0caca36978e4fa8f0f10e
- MD5 4f42b434c074f3de2df236880047dd9e
- SHA1 1b488e1cfca810ecdbec294b7d7c7b98a867b5b7
- SHA512 e78bbd88f986fdf4c232d995b2cdf6c4629a85c337d14c26c272866213fc0bbbcac617b2656485a7d7562ddd66c644655a1b436d5d042370c5d0bdfa90b9a45d
- SSDEEP 49152:YAMupu9kp1fnddE1/0yNXCA0Gwtxo/YW0w9Vl0GBHQ7KpPn8dWG7RjFfTe+/5aNL:lfY1K957IL
- TLSH T17B867C4BEEF518DBC89BB339C0232212FE62BC0019A61BA3ADD5F3745D337645669718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0f377e7dcc400928c137872cffe5fade1a23fbfe4fb0caca36978e4fa8f0f10e.dll
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
0f377e7dcc400928c137872cffe5fade1a23fbfe4fb0caca36978e4fa8f0f10e.dll
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 0f377e7dcc400928c137872cffe5fade1a23fbfe4fb0caca36978e4fa8f0f10e
- Size 7.5MB
- SHA256 0f377e7dcc400928c137872cffe5fade1a23fbfe4fb0caca36978e4fa8f0f10e
- MD5 4f42b434c074f3de2df236880047dd9e
- SHA1 1b488e1cfca810ecdbec294b7d7c7b98a867b5b7
- SHA512 e78bbd88f986fdf4c232d995b2cdf6c4629a85c337d14c26c272866213fc0bbbcac617b2656485a7d7562ddd66c644655a1b436d5d042370c5d0bdfa90b9a45d
- SSDEEP 49152:YAMupu9kp1fnddE1/0yNXCA0Gwtxo/YW0w9Vl0GBHQ7KpPn8dWG7RjFfTe+/5aNL:lfY1K957IL
- TLSH T17B867C4BEEF518DBC89BB339C0232212FE62BC0019A61BA3ADD5F3745D337645669718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext