General
- Target aa1e3547010357ab5d332d115e1aa9d227b1a0065cb7ccf8f048d2914197e723
- Size 4.4MB
- Sample260811-r91d7aeh65
- SHA256 aa1e3547010357ab5d332d115e1aa9d227b1a0065cb7ccf8f048d2914197e723
- MD5 02709c5e32df4e8e2e4f1e554ad1350a
- SHA1 a60b93f00f785200c239f35c0743607b7293b489
- SHA512 d5c948c1cd95ee11b342d022cbfa7b9da9131f752a68552451643e049ffc046de0582601d2f77eacf409b9050392b6c0a32458c1e1881be12d9b2cee5eaae988
- SSDEEP 98304:p8urE1QXIb7+PCJ5c6Jv8r33cMMIgmnp3uJDyC8l+8eaw+W0:eFSIX0a5c6Z8AMMIgmnxlur+W0
- TLSH T17826336B970211C08B052D756524FF8EE672CB44B34CA8F40DB49A343E9A7A55B7DCBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
HKA.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
HKA.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
当前目录添加到WD白名单.cmd
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
当前目录添加到WD白名单.cmd
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Behavioral task
behavioral5
Sample
当前目录移除WD白名单.cmd
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral6
Sample
当前目录移除WD白名单.cmd
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target HKA.exe
- Size 4.5MB
- SHA256 6ad72af453a9c4db99a30317e97689e893a110681e84655392865c8a813e8a5c
- MD5 d02212c7fb76461347686d99cfbd25c6
- SHA1 912e34145e5822e6dbc98eac55b2a1b80f7ea305
- SHA512 5b65a3f929ef593bc957da360d8b9b15ee825bdb1b407e19a3980936ef460a2860e4afbadd10ba7870f2231cd0ec0bbfe95388416afa1ba50d4f3312ea764015
- SSDEEP 98304:G+S9bgH9IDIZzMxqJ5w2zbArLVuoeWgunT3IlhCA6l+keOq8:9Mcd8IRGi5w2nAQoeWgun7luP8
- TLSH T1692633D6B20FE90CC890E7B4611D9E4AD653FB89560F72AE7FA07A693D1434006CC9E7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
- Target 当前目录添加到WD白名单.cmd
- Size 416B
- SHA256 f9e65a39bfcb45fa75a3fcce4c421a33ddd726dbf5a300ada0623f1ee3fcded2
- MD5 0c629d146aeff1670273d4ffa0c6b01b
- SHA1 45933d928fde7041f7dcdec38e7bb177ec9dc0ac
- SHA512 b3d77dc80f7861f19bae99cf0cff269e906d27302b7383705ff9ea89dc4faa65ab563500aa9b7e3849b37c627e07a9cf3855d235ce88fae300d41155f34a6f6a
- TLSH T116E0EC6240EA445F663673608E5D61553C1FD1BB0A599DC36630C4607904988F1EBE5B
- MD5 SHA1 SHA512 TLSH
Score6/10 -
- Target 当前目录移除WD白名单.cmd
- Size 422B
- SHA256 608896bbc173dda3037eefca287ad6de2b032c14423b01d06135632c54037995
- MD5 550eb7300f60e7b2746c1c33aa2dc3a5
- SHA1 00f442cd25aae45a8d0097d983c7922fc5c5417e
- SHA512 927a36d33812d0100b4bed427f6899b41928e0e98acd19c3634db81df14469bd0056b7e18d2e42aa910aabca4111ac86bad60998bdb94909fe3978729e13f8b2
- TLSH T113E05C2200EA441E673632608E1E25552C0FC1BB4A5DADC32630C4607904988F1EBE1B
- MD5 SHA1 SHA512 TLSH
Score6/10