General
- Target f19e395f6af72b7882f8f6c1603e6d762b9c7dfa088759410b0fbc18c458854b
- Size 1.5MB
- Sample260814-k6ymvsgg55
- SHA256 f19e395f6af72b7882f8f6c1603e6d762b9c7dfa088759410b0fbc18c458854b
- MD5 335c9a9b811b79bb2da5dcee26b34502
- SHA1 c9c0ce60617a348e951c0fb742de037b86635a82
- SHA512 a0ed0c8959bb30d893114c355a59130a3d5e035769602af861cf897e4cbe500062099044720cc63d7d8f60922d4eefce70de5e20bb777a6b3b3c3ab9a9507242
- SSDEEP 24576:fHuK+rT7nCRR8q/aHzu5f4xUshxkPKamOSzio/q8dAQvaY6mfdmQp8WvM02l:4AnaHzukUsh8KDLWoCkAFLmfRnM02l
- TLSH T11C75335862FD99B5D4F10DB0BA6086C5C5267F1129BC888E6BD1F9CD33678C2892533F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f19e395f6af72b7882f8f6c1603e6d762b9c7dfa088759410b0fbc18c458854b.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
f19e395f6af72b7882f8f6c1603e6d762b9c7dfa088759410b0fbc18c458854b.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target f19e395f6af72b7882f8f6c1603e6d762b9c7dfa088759410b0fbc18c458854b
- Size 1.5MB
- SHA256 f19e395f6af72b7882f8f6c1603e6d762b9c7dfa088759410b0fbc18c458854b
- MD5 335c9a9b811b79bb2da5dcee26b34502
- SHA1 c9c0ce60617a348e951c0fb742de037b86635a82
- SHA512 a0ed0c8959bb30d893114c355a59130a3d5e035769602af861cf897e4cbe500062099044720cc63d7d8f60922d4eefce70de5e20bb777a6b3b3c3ab9a9507242
- SSDEEP 24576:fHuK+rT7nCRR8q/aHzu5f4xUshxkPKamOSzio/q8dAQvaY6mfdmQp8WvM02l:4AnaHzukUsh8KDLWoCkAFLmfRnM02l
- TLSH T11C75335862FD99B5D4F10DB0BA6086C5C5267F1129BC888E6BD1F9CD33678C2892533F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
Suspicious use of SetThreadContext
-
- Target $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 8165c7aef7de3d3e0549776535bedc380ad9be7bb85e60ad6436f71528d092af
- MD5 08e9796ca20c5fc5076e3ac05fb5709a
- SHA1 07971d52dcbaa1054060073571ced046347177f7
- SHA512 02618317d6ab0302324aae4d3c5fca56b21e68c899e211cfa9412cf73820a1f931e56753c904fd7e510c638b4463aedbfe9536790279e096ea0387b67013e0c4
- SSDEEP 96:/Uspq2y5jOEEQrhySvUgfj74/vvrTBzfYZA4YF3Telac1nIq/2:/erjOELhySv5f2vvBjiAflaB1nIq
- TLSH T116C1F7B656C005F3E40D04B93E31280F87FEE426073242769E9B1ECA19D2AA6FD68751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10