General
- Target ez.exe
- Size 63.7MB
- Sample260822-aj3cesej6y
- SHA256 bfe9eb3c48b569a825d4397a33baa2862810e025ce4d751a61835fbb2cb159d8
- MD5 6af2f0428c5d5bb45d77333df6a27f79
- SHA1 14e94cd74601847eb273a3b491194baa84ace6bf
- SHA512 df90bda373d3840486722ae972aea2db6ad0dce6a1281823924516f848352fc97505d436c7e92713bb64ff7c4035fc65d204568538d3da6ec19e59e9e2d0ec5a
- SSDEEP 786432:Xcxji6iljTCe67zzevMMbiJYWpjVkac9rA:Xcxji6iJTCeWzavMMbiJYWphk
- TLSH T1FDE7724C24500AE5915BE815EAABCF1B5FE9D6EB4BE8244DBCA88E344CD3CB71D1074B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ez.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target ez.exe
- Size 63.7MB
- SHA256 bfe9eb3c48b569a825d4397a33baa2862810e025ce4d751a61835fbb2cb159d8
- MD5 6af2f0428c5d5bb45d77333df6a27f79
- SHA1 14e94cd74601847eb273a3b491194baa84ace6bf
- SHA512 df90bda373d3840486722ae972aea2db6ad0dce6a1281823924516f848352fc97505d436c7e92713bb64ff7c4035fc65d204568538d3da6ec19e59e9e2d0ec5a
- SSDEEP 786432:Xcxji6iljTCe67zzevMMbiJYWpjVkac9rA:Xcxji6iJTCeWzavMMbiJYWphk
- TLSH T1FDE7724C24500AE5915BE815EAABCF1B5FE9D6EB4BE8244DBCA88E344CD3CB71D1074B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger