General
- Target af20b2627b1d7119c84457fdc01d568ff845b1c1286e0da608f003a924b6b738.bin.exe
- Size 6.0MB
- Sample260811-zvb22sdk2v
- SHA256 af20b2627b1d7119c84457fdc01d568ff845b1c1286e0da608f003a924b6b738
- MD5 ad9e954add13ca133321b28ce04234b0
- SHA1 9f4d44df3a3acfffd23b171d3defe2f7e34535ba
- SHA512 dfe952c81ddbaafe231b85d11023fdcd65b0eb49c74cde3f3dac07e4f0c8a577933507e884679be09feb5960d70fd5245142ef08bc4e2320db3c59d6a8a86874
- SSDEEP 49152:V4bV381y5eAtfqP92d+4O7b2GLMC/BQqRwZsLilmcRqahmV23k4AFlX8H6WRi8xu:Vy9fE9UATMsRgsLiuMk4AzX8H1rxu
- TLSH T166566B43A951997AC0A5EB3145BB4256B729BC4C5B3837E32E70AFB82F367D21E35700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
af20b2627b1d7119c84457fdc01d568ff845b1c1286e0da608f003a924b6b738.bin.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
af20b2627b1d7119c84457fdc01d568ff845b1c1286e0da608f003a924b6b738.bin.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target af20b2627b1d7119c84457fdc01d568ff845b1c1286e0da608f003a924b6b738.bin.exe
- Size 6.0MB
- SHA256 af20b2627b1d7119c84457fdc01d568ff845b1c1286e0da608f003a924b6b738
- MD5 ad9e954add13ca133321b28ce04234b0
- SHA1 9f4d44df3a3acfffd23b171d3defe2f7e34535ba
- SHA512 dfe952c81ddbaafe231b85d11023fdcd65b0eb49c74cde3f3dac07e4f0c8a577933507e884679be09feb5960d70fd5245142ef08bc4e2320db3c59d6a8a86874
- SSDEEP 49152:V4bV381y5eAtfqP92d+4O7b2GLMC/BQqRwZsLilmcRqahmV23k4AFlX8H6WRi8xu:Vy9fE9UATMsRgsLiuMk4AzX8H1rxu
- TLSH T166566B43A951997AC0A5EB3145BB4256B729BC4C5B3837E32E70AFB82F367D21E35700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Suspicious use of NtSetInformationThreadHideFromDebugger