General
- Target NOXPBPV2.exe
- Size 107KB
- Sample260808-2m6msszvbx
- SHA256 7f62ddc035e0b408bbdf46920772feaaa06e65662b67b000da0875bba0949d84
- MD5 6ded3ef5fff5c976eb6941c3a52fd49c
- SHA1 51b8070fb9a026448cd8920c2f52a9d847b5c358
- SHA512 30ed1a396c70557460114a5ca0df6310938ac29e25ce8cf98a83413179442fe5a5303cb01aa0f94583c698b1cc69ddbb863fc0ba5a1b7489b9884a70ff2b2d68
- SSDEEP 3072:vZ2mAJocBGjHfsT2pl8qidSUfQkHuIxte:vZ2mAJpGjHEib8qi9fQkHuGte
- TLSH T19CB35C17FB1911BDD11E86B8C5534D06DB72B89107A1B3CB6BD08AD60F569E8BF3EA00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NOXPBPV2.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
NOXPBPV2.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target NOXPBPV2.exe
- Size 107KB
- SHA256 7f62ddc035e0b408bbdf46920772feaaa06e65662b67b000da0875bba0949d84
- MD5 6ded3ef5fff5c976eb6941c3a52fd49c
- SHA1 51b8070fb9a026448cd8920c2f52a9d847b5c358
- SHA512 30ed1a396c70557460114a5ca0df6310938ac29e25ce8cf98a83413179442fe5a5303cb01aa0f94583c698b1cc69ddbb863fc0ba5a1b7489b9884a70ff2b2d68
- SSDEEP 3072:vZ2mAJocBGjHfsT2pl8qidSUfQkHuIxte:vZ2mAJpGjHEib8qi9fQkHuGte
- TLSH T19CB35C17FB1911BDD11E86B8C5534D06DB72B89107A1B3CB6BD08AD60F569E8BF3EA00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.