General
- Target adc819a3a7c2ca3d54432b05b3f7861fe01754e0197c1691dc7b8a4c07bd8b9a
- Size 199KB
- Sample260811-krpfmswsb1
- SHA256 adc819a3a7c2ca3d54432b05b3f7861fe01754e0197c1691dc7b8a4c07bd8b9a
- MD5 251de7aafbac9ca8a6238eb1648762f3
- SHA1 ed4c42b751b0675e0d93ec80947e97f2bca089dc
- SHA512 6687a4f2ba615c15e7a3c20487e8e3794c984baadea43d004dabeea5d65cfb3cfe8091afa1ecf77911ed611aff26589b9f2c8ce98790b826ed08c6030a831b62
- SSDEEP 6144:23WhzzX9rbGkMPfAgaNpqpRW861vHT+HY1zB94tCr:GWhzr9rbGDAgUkpRXevzwY1zB9Cw
- TLSH T10C14230BDE994129C8E062FF70C5FAFD2F3CF2DE292432CA319812695527017E2D496A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
quarantine/ftpServer.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
quarantine/ftpServer.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target quarantine/ftpServer.exe
- Size 252KB
- SHA256 61c1e1f749e9c8c0b15e0b0508aa44aa0f244ee836b4f197d513e3d3967efa15
- MD5 e0fd19083702d0961d6aada3b4a25c19
- SHA1 d0c2babf51cc8374eb065f58ba4086ad86391307
- SHA512 521ac137c3a88578246335b32d4c662c9d9d242734fe3866cb6fa3979a12d9a2b84df269c3ff3f7ed0df7cc7113b295d758c2ed4b4fcee82ac8fb75bea12053c
- SSDEEP 6144:YeoEMgixHSvUrbQ6MPfyAaNJqpRjHLAF1/DNZVT+XY1zBAMOWb:34HhrbQlyAUEpRHEJZhCY1zBLzb
- TLSH T15644D087FB8FF2B2DC1A7D715647EABE46E0F43388348E06D2C0495EDA5242274D9392
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL