General
- Target ndiskd.exe
- Size 737KB
- Sample260816-xhhb7avydy
- SHA256 3e6f30b04de78d3946ba1ad4c8148e344006fd6fd566b402b52a008825e21b34
- MD5 e5f51b0dd7c383837836cff9bcd861d4
- SHA1 d2ef3cad691a3ceb2319ef5c96879fc81c69670d
- SHA512 facad10673f6f361a1a3e46cb0259334e272cb753eea2bb6554345fe69c6467d261bb716bd6630a840316d1644779c928aeb38faa6b712047bcb399a2cc90ba4
- SSDEEP 12288:UOez9imMKC51qZ8m4j6fU+jET9fgHunOW6FWx4j2DbF8EB0KFQ5QlsXoDVIImDvj:Ubuh556fUOq94ZYE2DbwKC5SEoDWISzp
- TLSH T1CAF4BF4ABCD700B1E56ACF31A82B5507F4BDEFDC0814D53A238872EC753562D4A9EB85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ndiskd.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ndiskd.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target ndiskd.exe
- Size 737KB
- SHA256 3e6f30b04de78d3946ba1ad4c8148e344006fd6fd566b402b52a008825e21b34
- MD5 e5f51b0dd7c383837836cff9bcd861d4
- SHA1 d2ef3cad691a3ceb2319ef5c96879fc81c69670d
- SHA512 facad10673f6f361a1a3e46cb0259334e272cb753eea2bb6554345fe69c6467d261bb716bd6630a840316d1644779c928aeb38faa6b712047bcb399a2cc90ba4
- SSDEEP 12288:UOez9imMKC51qZ8m4j6fU+jET9fgHunOW6FWx4j2DbF8EB0KFQ5QlsXoDVIImDvj:Ubuh556fUOq94ZYE2DbwKC5SEoDWISzp
- TLSH T1CAF4BF4ABCD700B1E56ACF31A82B5507F4BDEFDC0814D53A238872EC753562D4A9EB85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger