General
- Target Tax-Number852694.zip
- Size 5.1MB
- Sample260823-anhtksgh52
- SHA256 b292de38fda529070124638f89b6b6299553250aa56aadf3f59d3c98c3e8b15e
- MD5 1010d391a065b8b12371b1720ea89081
- SHA1 6d36d8b78d9909e348917dc823698844b950f9b9
- SHA512 af2622c7e26ee1f7a48d69fcef2549bcaf02c4db41a11efab4020978844fcde4cc2c6b9514a24a2e4b4ae4455ec209fa99d8646ee081405df6eb0bac0687a2a7
- SSDEEP 98304:1+fz3TDxuCtpEps+xbg8Wh9tCwLPhFzDlKNtNBFPVwAsTXGzykRdl:1+z3Vks+xb8hRLnnIrZVwANzP7l
- TLSH T1D73633E1A25C0B7680F6587827290418DBC6FA15768D5C7E17C20ECEF5DB3580CEAE6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
INT-Number.20260820113657.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
INT-Number.20260820113657.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
hdp.dll
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral4
Sample
hdp.dll
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target INT-Number.20260820113657.EXE
- Size 3.0MB
- SHA256 53a4e54f23228c129e2f3d6f34ac457878e49ed2bb5ac13f05c10a55693d2dd8
- MD5 9033f5bed49269403341abcfbd8244eb
- SHA1 b2c8ddc97ec6894123ceba781ca0311a25472a3d
- SHA512 bef1c4c9fdb148554ccb84320d0164e9f3d4ef27ccb238592a6d56d27b7b901bbcd4540075c5a3302ecb6853ad4d4f827e39de7d75f7c1de6fe7a7ee9030009a
- SSDEEP 98304:16NPHPNYDT1g+8UYEP8deLgOgBnr9HUAi58:16NPHPNYDT1g+bYw8deLsnrtge
- TLSH T1A9E59D22F9019432F8E20077D7FE4BBE492DAA30172894D3D7D518A95AB05E27B3B357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
- Target hdp.dLL
- Size 5.8MB
- SHA256 a0160e1fb98ba8d27b0849bf68eadbfc3919a12207fbd329aa11efa41e16a5f4
- MD5 6fc6a5718e9052b18890ecc56d98bc1f
- SHA1 eaa5c1a9ea63c02cbf357db6833c456b16d50410
- SHA512 d5d6da02fe2b5958689c61bdc3cf2ed54e46c8f38b2ff7819b6ebaac777e12807de4adb85e535d5853e034ce19a6db127b245e5cb5a87d231623066bfe52bafe
- SSDEEP 98304:c6CysmjOw4YDZJdbYM6ZahkmsnrSbVHyqbtbZ4OiZrq1DfPHNADtV6v+zM+rwroJ:Bs7wnBP6Zahkmui1RZ4O7NADtV6v+zZT
- TLSH T17D56D0913D5C40A6E05B1231CF6BA2BCF2EE7DB03B75315B1680FA1AFB357414A18A5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.