General

  • Target
    26254f46ae07808cb0623890db27ed9ae7bd4b0e396162f61a61218fb6c866a4
  • Size 1.4MB
  • Sample260802-jsmsrsfc96
  • SHA256 26254f46ae07808cb0623890db27ed9ae7bd4b0e396162f61a61218fb6c866a4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 3 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 26254f46ae07808cb0623890db27ed9ae7bd4b0e396162f61a61218fb6c866a4
    .zip 1.4MB
  • ក្មេងស្រីត្រូវបានរំលោភដោយមនុស្សជាច្រើន_វីដេអូអំពើហិង្សា.exe
    .exe 1.4MB
  • $PLUGINSDIR/nsExec.dll
    .dll 7KB
  • setup.zip
    .zip 1.4MB
  • Setting.lua
    1.8MB
  • TGFile.exe
    .exe 27KB
  • libepsbase.dll
    .dll 262KB
  • log.s
    .js .xml 1KB
  • lua51.dll
    .dll 476KB
  • msvcr100.dll
    .dll 809KB
  • vcruntime140.dll
    .dll 121KB

26254f46ae07808cb0623890db27ed9ae7bd4b0e396162f61a61218fb6c866a4

  • SHA256 26254f46ae07808cb0623890db27ed9ae7bd4b0e396162f61a61218fb6c866a4
  • MD5 SHA1 SHA512 SSDEEP TLSH