General
- Target uks.exe
- Size 483KB
- Sample260813-ajc3jaff25
- SHA256 a3f23ddfd3dd058a1f60dda50ad5a08e31522148ac7739c4df3b3b498ece4637
- MD5 8c1ca7398246703c6df6ff1f5f3c2afa
- SHA1 a591eda7d3ec0099c80a18a139348e16847ae2ac
- SHA512 be27824cd39664d317fc8ef9d6da430e6beddf3acfeb02f706d94fb025399827cf6c3ee4346b00915749016288c18b92bc1b329870e3701f48f7cd82b91f9273
- SSDEEP 12288:qLiUZG8a8WoSODfsYFu6SlICntgp6S3S+pkF:qxZG8a8tXVkICtb8KF
- TLSH T1B8B40100EE8258ECD07A877059B75A5320337DEC5C75F11F9A58B7BB7F729818A3A206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
uks.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
uks.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target uks.exe
- Size 483KB
- SHA256 a3f23ddfd3dd058a1f60dda50ad5a08e31522148ac7739c4df3b3b498ece4637
- MD5 8c1ca7398246703c6df6ff1f5f3c2afa
- SHA1 a591eda7d3ec0099c80a18a139348e16847ae2ac
- SHA512 be27824cd39664d317fc8ef9d6da430e6beddf3acfeb02f706d94fb025399827cf6c3ee4346b00915749016288c18b92bc1b329870e3701f48f7cd82b91f9273
- SSDEEP 12288:qLiUZG8a8WoSODfsYFu6SlICntgp6S3S+pkF:qxZG8a8tXVkICtb8KF
- TLSH T1B8B40100EE8258ECD07A877059B75A5320337DEC5C75F11F9A58B7BB7F729818A3A206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 25KB
- SHA256 29379ece432ccb81e22e57d7b5a8a77951c985495a931827f01771cf60b8b438
- MD5 9b3a5adad3c54468b976f683ef28aae4
- SHA1 e6ce3ed9fa51474ca560c41075be8cd52ae81e46
- SHA512 338ac47163f4c74af5c46318abf9d2a86febeeba4966ba2f3bcc5edc95ca373e253b3214fdcf349a13d431852b052d5910947ee9a63797ca4da0ba8333db4929
- SSDEEP 384:5Z2pfUx9eVLwDKO9XYD/isN7lCEjgwMU/ktKi+R45Duwomq8pqdDvHG1Q:5r96YIrx7lC7vU/kaG9uLmCdb
- TLSH T1A8B24C07F38398BFC50BC17186EF5772AA32BE211B616F6F1220F5756E24E90871DA14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10