General
- Target hotmoms.exe
- Size 6.2MB
- Sample260809-slhpxattcs
- SHA256 9de0aad86c35903be67941cc206cb675bab2621b831309a3e7f9fbaa650649f6
- MD5 1b9971afcae0445f029b89c4e6675ef1
- SHA1 9527fe807e211a0a21055076d1d0e03edc2e3a20
- SHA512 65eb7bbddac49438d0284a69f8278329613c5a8592b7f3f1ce68f0d38664e70c5101cc453ed2c0b3596e2a6c621cdf6380f68e5066b037656a89c9749574d3f6
- SSDEEP 98304:mII/JztZV/OETNuSd+hSU4H5uWX/1JMg2xKYdRiqLIOE35rpT92t1ntk5aY+:mIuPV2ETNXEhSUCixn3iOaJtTUtg+
- TLSH T1E35622AE6640775CC01EC2309833FD49F3BA955D47E9D6EEB2CB27D067AE810E605B06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
hotmoms.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
hotmoms.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target hotmoms.exe
- Size 6.2MB
- SHA256 9de0aad86c35903be67941cc206cb675bab2621b831309a3e7f9fbaa650649f6
- MD5 1b9971afcae0445f029b89c4e6675ef1
- SHA1 9527fe807e211a0a21055076d1d0e03edc2e3a20
- SHA512 65eb7bbddac49438d0284a69f8278329613c5a8592b7f3f1ce68f0d38664e70c5101cc453ed2c0b3596e2a6c621cdf6380f68e5066b037656a89c9749574d3f6
- SSDEEP 98304:mII/JztZV/OETNuSd+hSU4H5uWX/1JMg2xKYdRiqLIOE35rpT92t1ntk5aY+:mIuPV2ETNXEhSUCixn3iOaJtTUtg+
- TLSH T1E35622AE6640775CC01EC2309833FD49F3BA955D47E9D6EEB2CB27D067AE810E605B06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext