General
- Target cf52086f0a8947df95b137c120222e5d52848b4ef8983d3aa3d00219f4811fa5
- Size 1.7MB
- Sample260814-k4ef7sgn6v
- SHA256 cf52086f0a8947df95b137c120222e5d52848b4ef8983d3aa3d00219f4811fa5
- MD5 af73349fd39d3d00d160fdb1fe71aa3b
- SHA1 dd3b1d0b3c417f6556709e7911e667ae56488073
- SHA512 d0090d0b5b5046df93e883bc8ee4272de99b463a9bef3fa8a02e5f944263cf980779809f3d2fea03aa68a7e386f0a82b0c885a7e6335552853eddadca6eab8af
- SSDEEP 24576:N6ZnUAGjnIsmGdvCsOmmE5ieCxLN/+kbHQcW8fbcZpZ9KfZ6vvU:NSrgvCVE5rCxLN/+W5WhKkHU
- TLSH T1AD85128DD3999662DAAE077BBCD1B69547F4F501E38EE3DD21C829F60C4F7968800272
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cf52086f0a8947df95b137c120222e5d52848b4ef8983d3aa3d00219f4811fa5.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
cf52086f0a8947df95b137c120222e5d52848b4ef8983d3aa3d00219f4811fa5.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target cf52086f0a8947df95b137c120222e5d52848b4ef8983d3aa3d00219f4811fa5
- Size 1.7MB
- SHA256 cf52086f0a8947df95b137c120222e5d52848b4ef8983d3aa3d00219f4811fa5
- MD5 af73349fd39d3d00d160fdb1fe71aa3b
- SHA1 dd3b1d0b3c417f6556709e7911e667ae56488073
- SHA512 d0090d0b5b5046df93e883bc8ee4272de99b463a9bef3fa8a02e5f944263cf980779809f3d2fea03aa68a7e386f0a82b0c885a7e6335552853eddadca6eab8af
- SSDEEP 24576:N6ZnUAGjnIsmGdvCsOmmE5ieCxLN/+kbHQcW8fbcZpZ9KfZ6vvU:NSrgvCVE5rCxLN/+W5WhKkHU
- TLSH T1AD85128DD3999662DAAE077BBCD1B69547F4F501E38EE3DD21C829F60C4F7968800272
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Executes dropped EXE
-
Suspicious use of SetThreadContext