General
- Target 4d88ce05409e52572b1e2b1e7471672f703472e410ad5b71c7fd13e6dafe01eb.exe
- Size 598KB
- Sample260824-yjczjaywas
- SHA256 4d88ce05409e52572b1e2b1e7471672f703472e410ad5b71c7fd13e6dafe01eb
- MD5 1c754ccbcd8b81e148b6bf1e8e1408fa
- SHA1 052c6ddb0520d76e1c6005bef96e28e9e7e9638f
- SHA512 c564ccb44c6b5abdaad499305c16208d1a2f607c76afc10d677b8edcce59b1a905f614410468b3559df7256f3cb6dea817da90d293fdf0835f823aa6ff8b20d3
- SSDEEP 12288:/TA580bdpG0uxWBn1R02Y43VKuEHV+nxTo8+sMX9dkmE2f0:/TA580bi0uxWF1R0P4lJLO8hmE28
- TLSH T17CD402C0E7409C32C6908975CECB86A6C7997717D0BB85F2FE70B95E687392219DBE40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
4d88ce05409e52572b1e2b1e7471672f703472e410ad5b71c7fd13e6dafe01eb.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
4d88ce05409e52572b1e2b1e7471672f703472e410ad5b71c7fd13e6dafe01eb.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 4d88ce05409e52572b1e2b1e7471672f703472e410ad5b71c7fd13e6dafe01eb.exe
- Size 598KB
- SHA256 4d88ce05409e52572b1e2b1e7471672f703472e410ad5b71c7fd13e6dafe01eb
- MD5 1c754ccbcd8b81e148b6bf1e8e1408fa
- SHA1 052c6ddb0520d76e1c6005bef96e28e9e7e9638f
- SHA512 c564ccb44c6b5abdaad499305c16208d1a2f607c76afc10d677b8edcce59b1a905f614410468b3559df7256f3cb6dea817da90d293fdf0835f823aa6ff8b20d3
- SSDEEP 12288:/TA580bdpG0uxWBn1R02Y43VKuEHV+nxTo8+sMX9dkmE2f0:/TA580bi0uxWF1R0P4lJLO8hmE28
- TLSH T17CD402C0E7409C32C6908975CECB86A6C7997717D0BB85F2FE70B95E687392219DBE40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10