General
- Target Hiddify-Windows-Setup-x64.exe
- Size 34.8MB
- Sample260809-wbpl9abj9y
- SHA256 3f6182b610168c0bb386ffea1fc7f68318d3df23c15840c8b13a3be51b080a96
- MD5 6526b0d050fc4c89ade13f6ea208e81c
- SHA1 3bb827cc77fa10f8255f5a4c5c1997b81c939d57
- SHA512 a8c89ebcb3abbf8dc88946a42ee2d19ebe5b43370d44dab88e0f5614891bef8d4586e9e8d6295586113de15e1148bcbbb1c1ab364c38f8db745708376772b816
- SSDEEP 786432:5ETE4OQKy/nKPDHxfPRRS3u875h2X1kYRMdiZHUe0kcjPRtS:8E4ZKkWRPRD875Gvk+1cPS
- TLSH T1AB87333BB18F253EE0296B3A75B2915059373B11A5128C6797F4C88CCF264712E3E79B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Hiddify-Windows-Setup-x64.exe
Resource
win10v2004-20260513-en
25 signatures
150 seconds
Behavioral task
behavioral2
Sample
Hiddify-Windows-Setup-x64.exe
Resource
win11ltsc2024-20260710-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target Hiddify-Windows-Setup-x64.exe
- Size 34.8MB
- SHA256 3f6182b610168c0bb386ffea1fc7f68318d3df23c15840c8b13a3be51b080a96
- MD5 6526b0d050fc4c89ade13f6ea208e81c
- SHA1 3bb827cc77fa10f8255f5a4c5c1997b81c939d57
- SHA512 a8c89ebcb3abbf8dc88946a42ee2d19ebe5b43370d44dab88e0f5614891bef8d4586e9e8d6295586113de15e1148bcbbb1c1ab364c38f8db745708376772b816
- SSDEEP 786432:5ETE4OQKy/nKPDHxfPRRS3u875h2X1kYRMdiZHUe0kcjPRtS:8E4ZKkWRPRD875Gvk+1cPS
- TLSH T1AB87333BB18F253EE0296B3A75B2915059373B11A5128C6797F4C88CCF264712E3E79B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Stops running service(s)
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1