General
- Target 62d55380d22f1a9be337f905d7f3cbe8cfce73bdc272635a4b83ce33f6b5fe48.exe
- Size 418KB
- Sample260810-qjffnagd34
- SHA256 62d55380d22f1a9be337f905d7f3cbe8cfce73bdc272635a4b83ce33f6b5fe48
- MD5 199536bdda56947cb305b55b2b8a7d86
- SHA1 ffae132e7744dc5e2544fb2550fb226f8ad700fa
- SHA512 2bbf53da85caa84c4dd69b96f3b29acc9b2a6010598b4096c66d095e7d4ded13fdd5f49ef0249e0f2107ad4125f5aadb0be200e1e38f1cec285deddd9d6d407f
- SSDEEP 6144:CpkXGhE4TrIg1+MoMRAjKOvF72AJOuf6+Ak+CujLSw5WvQv2u2ZouSZX:DiTrIg1+eaj5760+CWewJv2u2Z6ZX
- TLSH T14994F1882F6DED0BD1958C344DB5F92BA2B84DA08DC77B02EF913D4CB9367C4BA09516
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
62d55380d22f1a9be337f905d7f3cbe8cfce73bdc272635a4b83ce33f6b5fe48.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
62d55380d22f1a9be337f905d7f3cbe8cfce73bdc272635a4b83ce33f6b5fe48.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 62d55380d22f1a9be337f905d7f3cbe8cfce73bdc272635a4b83ce33f6b5fe48.exe
- Size 418KB
- SHA256 62d55380d22f1a9be337f905d7f3cbe8cfce73bdc272635a4b83ce33f6b5fe48
- MD5 199536bdda56947cb305b55b2b8a7d86
- SHA1 ffae132e7744dc5e2544fb2550fb226f8ad700fa
- SHA512 2bbf53da85caa84c4dd69b96f3b29acc9b2a6010598b4096c66d095e7d4ded13fdd5f49ef0249e0f2107ad4125f5aadb0be200e1e38f1cec285deddd9d6d407f
- SSDEEP 6144:CpkXGhE4TrIg1+MoMRAjKOvF72AJOuf6+Ak+CujLSw5WvQv2u2ZouSZX:DiTrIg1+eaj5760+CWewJv2u2Z6ZX
- TLSH T14994F1882F6DED0BD1958C344DB5F92BA2B84DA08DC77B02EF913D4CB9367C4BA09516
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 2e226715419a5882e2e14278940ee8ef0aa648a3ef7af5b3dc252674111962bc
- MD5 a4dd044bcd94e9b3370ccf095b31f896
- SHA1 17c78201323ab2095bc53184aa8267c9187d5173
- SHA512 87335a43b9ca13e1300c7c23e702e87c669e2bcf4f6065f0c684fc53165e9c1f091cc4d79a3eca3910f0518d3b647120ac0be1a68eaade2e75eaa64adfc92c5a
- SSDEEP 192:em24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlESl:m8QIl975eXqlWBrz7YLOlE
- TLSH T168325C12135081F3E4918138886B3A276B6A15029BF98E57DFD39646BE21BE3BD7D603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10