General
- Target b7b3831399d9a7c33cc0802783f290cb3e2bee5b5a99020a95da396e215a3e71.exe
- Size 907KB
- Sample260825-caewwaff67
- SHA256 b7b3831399d9a7c33cc0802783f290cb3e2bee5b5a99020a95da396e215a3e71
- MD5 7a3950eacbbeff31ae00f4d80d56a97d
- SHA1 fdaa2cc37cb37f24abbf6da7af6cdf27b6d9f9b7
- SHA512 3c916c6a8674d9c0e7f4d5ac1762ac57facb07bad9e4e1586f46aa6f66d33f61b3c091acae7a689579f2f386a74b525d4c591b66b5869a0a3ebb3328789e92d4
- SSDEEP 24576:UjvTizhGAfP8sV21yXvRkIPYvzQasJ6lIyh0IX:U7EUAcsVXSxvcasQlIyhV
- TLSH T1521523427790C86DE272093AC9387EFEBBA06DE9D5916E2713443D4DFC3A2D16D0D682
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
b7b3831399d9a7c33cc0802783f290cb3e2bee5b5a99020a95da396e215a3e71.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
b7b3831399d9a7c33cc0802783f290cb3e2bee5b5a99020a95da396e215a3e71.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target b7b3831399d9a7c33cc0802783f290cb3e2bee5b5a99020a95da396e215a3e71.exe
- Size 907KB
- SHA256 b7b3831399d9a7c33cc0802783f290cb3e2bee5b5a99020a95da396e215a3e71
- MD5 7a3950eacbbeff31ae00f4d80d56a97d
- SHA1 fdaa2cc37cb37f24abbf6da7af6cdf27b6d9f9b7
- SHA512 3c916c6a8674d9c0e7f4d5ac1762ac57facb07bad9e4e1586f46aa6f66d33f61b3c091acae7a689579f2f386a74b525d4c591b66b5869a0a3ebb3328789e92d4
- SSDEEP 24576:UjvTizhGAfP8sV21yXvRkIPYvzQasJ6lIyh0IX:U7EUAcsVXSxvcasQlIyhV
- TLSH T1521523427790C86DE272093AC9387EFEBBA06DE9D5916E2713443D4DFC3A2D16D0D682
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 2e226715419a5882e2e14278940ee8ef0aa648a3ef7af5b3dc252674111962bc
- MD5 a4dd044bcd94e9b3370ccf095b31f896
- SHA1 17c78201323ab2095bc53184aa8267c9187d5173
- SHA512 87335a43b9ca13e1300c7c23e702e87c669e2bcf4f6065f0c684fc53165e9c1f091cc4d79a3eca3910f0518d3b647120ac0be1a68eaade2e75eaa64adfc92c5a
- SSDEEP 192:em24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlESl:m8QIl975eXqlWBrz7YLOlE
- TLSH T168325C12135081F3E4918138886B3A276B6A15029BF98E57DFD39646BE21BE3BD7D603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10