General
- Target AMS.exe
- Size 8.5MB
- Sample260816-llhatagp4w
- SHA256 dc4e62f04a804857ac3a44c0898f0537a399f2aaf834936226c4df8903c033e0
- MD5 42064ca619c4bca5f62de29facc0fb3d
- SHA1 8c8b8cb23db4ed99407f30e7da04e50e65ba1026
- SHA512 5bddb966c9aadcad581dd9b98ee983ca7c4f4d37e893f0eefeea6e4332a2f90b3681abc529dc0ba5757c541999b0f8efcc4ef886cf8454cdff43ac9468e9ccd2
- SSDEEP 196608:rfURoF9iquX3FXWNjXBI9N7ENGc0BtqLp4sG5IQYs:AA9UX3pWhRI7gNjLp4sG5IK
- TLSH T1CD96E1F12B99DD13E34694F8A018F378C525ED620A9A8421D4FB3CEBB57EB756C19023
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AMS.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
AMS.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target AMS.exe
- Size 8.5MB
- SHA256 dc4e62f04a804857ac3a44c0898f0537a399f2aaf834936226c4df8903c033e0
- MD5 42064ca619c4bca5f62de29facc0fb3d
- SHA1 8c8b8cb23db4ed99407f30e7da04e50e65ba1026
- SHA512 5bddb966c9aadcad581dd9b98ee983ca7c4f4d37e893f0eefeea6e4332a2f90b3681abc529dc0ba5757c541999b0f8efcc4ef886cf8454cdff43ac9468e9ccd2
- SSDEEP 196608:rfURoF9iquX3FXWNjXBI9N7ENGc0BtqLp4sG5IQYs:AA9UX3pWhRI7gNjLp4sG5IK
- TLSH T1CD96E1F12B99DD13E34694F8A018F378C525ED620A9A8421D4FB3CEBB57EB756C19023
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger