General
- Target Tax-Number852693.zip
- Size 4.9MB
- Sample260820-wym2yafc24
- SHA256 feb58c7b63cdd7b1a4300f43646914f3e8cb92bd0f061113997ed5bd4f892582
- MD5 c08c4fb86865acada0680efd13e0c431
- SHA1 35758a1ebe2900789075314662bb7cee04fe52ac
- SHA512 d2a8ddcc535bfd5b9cdc14f6ca5b06719c95d1181aee09208f03a24e313194071f8713eb48ebadc3514a983c78813fb96a0541234afcaa2da1d7f83d43b96a45
- SSDEEP 98304:M8PhmLRAB4lqhR8HDg0aAsP1q8fQnDimYjMB2YxDQ7qbPLxRaj:7mLRC4lY8H00jsP1qfubMB2Yxs7q7LXu
- TLSH T1E336334EA12920FD442B27AFE1054317DCDEBDC636785D4E0BDEB4CA64ED2D039660AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TI.Number-20260819145147.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
TI.Number-20260819145147.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
hdp.dll
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral4
Sample
hdp.dll
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target TI.Number-20260819145147.EXE
- Size 3.0MB
- SHA256 53a4e54f23228c129e2f3d6f34ac457878e49ed2bb5ac13f05c10a55693d2dd8
- MD5 9033f5bed49269403341abcfbd8244eb
- SHA1 b2c8ddc97ec6894123ceba781ca0311a25472a3d
- SHA512 bef1c4c9fdb148554ccb84320d0164e9f3d4ef27ccb238592a6d56d27b7b901bbcd4540075c5a3302ecb6853ad4d4f827e39de7d75f7c1de6fe7a7ee9030009a
- SSDEEP 98304:16NPHPNYDT1g+8UYEP8deLgOgBnr9HUAi58:16NPHPNYDT1g+bYw8deLsnrtge
- TLSH T1A9E59D22F9019432F8E20077D7FE4BBE492DAA30172894D3D7D518A95AB05E27B3B357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
- Target hdp.dLL
- Size 5.6MB
- SHA256 d7b7cec28ea90b651e77450011864e756baf721e226827727fe67f7d2502a9ce
- MD5 60ebbcbaa0ce6183119e26e7b4cf29ce
- SHA1 2da77192bc18f29ad85399d8a4068412115c7900
- SHA512 89688b7bf13224d3e70ec0b3fc8d1a4297a4f15268d4eb9fa71c2146165c061a9e4ec411de0e1cd222d37242f706e821e243d7e8d6bdc52c5109cf8f167ae71b
- SSDEEP 98304:g2C7uzfNvxse6NjjsAI+jEqkKmHEpXFxr5n6fyq+nkDOByQfoOiGBx5A2NwKEYos:lV9GAqkKmHEpXFxr5n6fyq+nkDOByQf3
- TLSH T13D56D0313D5D009EE0AA12398F68AAEDF2FE7DA03BB531571980F639FB35B414A1415B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.