2026-08-06_83a952ab8cd910a892a1a52052d47bc8_

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-06_83a952ab8cd910a892a1a52052d47bc8_
Size 85KB
Sample260806-nlnhyaam6s
SHA256 a2d5bc66c613fe4c97f10ed5e36ed4b8110bf917d6a7bf79e3188b40352420e4
MD5 83a952ab8cd910a892a1a52052d47bc8
SHA1 1d27b877fc4750cf7b3240ba0097f5c6a93cd0fe
SHA512 667cde24eb674b0e31885481e97f4c82e58e3d42a10aa09824bbab0c3f6d3fad567acb759c642dfbbe2a1c8e1915349ec7fef74567bc5953c2ce5cf9b8f82c3e
SSDEEP 1536:/Xs9jpnkjdFAUKFywuD4nAMhBrMyfpQ9tjnCpTpmPyYjn930T9UHO0HV68TvyHkI:/X0pnkjvA7FG4nAMhBrBpQ37CplmyYji
TLSH
T164834B2257D821F8D92B813DD6A1152BD7B074E8132153DF26AFCA2C0F11AE66DBEF44
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-06_83a952ab8cd910a892a1a52052d47bc8_

File Explorer

2026-08-06_83a952ab8cd910a892a1a52052d47bc8_

.exe 85KB

2026-08-06_83a952ab8cd910a892a1a52052d47bc8_

IMPHASH e185e04142bc2c065204f67c72fbdc57
SHA256 a2d5bc66c613fe4c97f10ed5e36ed4b8110bf917d6a7bf79e3188b40352420e4
MD5 83a952ab8cd910a892a1a52052d47bc8
SHA1 1d27b877fc4750cf7b3240ba0097f5c6a93cd0fe
SHA512 667cde24eb674b0e31885481e97f4c82e58e3d42a10aa09824bbab0c3f6d3fad567acb759c642dfbbe2a1c8e1915349ec7fef74567bc5953c2ce5cf9b8f82c3e
SSDEEP 1536:/Xs9jpnkjdFAUKFywuD4nAMhBrMyfpQ9tjnCpTpmPyYjn930T9UHO0HV68TvyHkI:/X0pnkjvA7FG4nAMhBrBpQ37CplmyYji
TLSH
T164834B2257D821F8D92B813DD6A1152BD7B074E8132153DF26AFCA2C0F11AE66DBEF44
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

56620

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s __stdio_common_vfprintf __p__commode __acrt_iob_func _set_fmode

api-ms-win-crt-string-l1-1-0

wcsncmp strncmp strspn strncat strnlen strncpy wcsnlen wcsncpy wcsncat _wcsicmp

api-ms-win-crt-convert-l1-1-0

wcstombs mbstowcs atoi

api-ms-win-crt-utility-l1-1-0

rand srand

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-runtime-l1-1-0

abort _seh_filter_exe _set_app_type terminate _crt_atexit _get_initial_narrow_environment _initialize_onexit_table _configure_narrow_argv _initterm _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _register_onexit_function _exit exit _initterm_e _initialize_narrow_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode calloc

kernel32

TerminateProcess GetCurrentProcess GetProcessHeap LoadLibraryExW GetProcAddress HeapAlloc FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetLastError SetLastError RtlUnwindEx LocalAlloc LocalFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetModuleHandleW IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind GetCurrentThreadId RtlLookupFunctionEntry RtlCaptureContext InitializeSListHead GetSystemTimeAsFileTime

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-06_83a952ab8cd910a892a1a52052d47bc8_

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

generic