973691084ba6a133920754533b8f5080b8454d33265f50690c4a671955455c75

Sharing

Copy URL Twitter E-mail

General

Target
973691084ba6a133920754533b8f5080b8454d33265f50690c4a671955455c75
Size 905KB
Sample260825-g6mntaxeqh
SHA256 973691084ba6a133920754533b8f5080b8454d33265f50690c4a671955455c75
MD5 629a1d98e7880ea7748f93483d31546c
SHA1 f82525426817ca3a70bbc2b9f374f6c7cf11ec24
SHA512 ea94869c9246dd948203f8fa9abf889a82f1129609ee9630575ff884eb2b62c877d4429fdbe454e2788d93d8305a6b2b9a8cbbc1e77716b5fc66e476b2f1fe1d
SSDEEP 12288:hpBje9UQV4cTsq5lqNlfzupIysdpu3FGYhoqFLPyI4hBKiB:hpBje9UQV4cTsq5lqNNupCG3MQLFb+K
TLSH
T129154B66FB90804CC13B84B0D93593B3EF907CEE4B107AE351E2CA562AB7ED96D35215
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
973691084ba6a133920754533b8f5080b8454d33265f50690c4a671955455c75

File Explorer

973691084ba6a133920754533b8f5080b8454d33265f50690c4a671955455c75

.dll 905KB

973691084ba6a133920754533b8f5080b8454d33265f50690c4a671955455c75

IMPHASH 5040ecd86c29df820e0f21a1ad66d35e
SHA256 973691084ba6a133920754533b8f5080b8454d33265f50690c4a671955455c75
MD5 629a1d98e7880ea7748f93483d31546c
SHA1 f82525426817ca3a70bbc2b9f374f6c7cf11ec24
SHA512 ea94869c9246dd948203f8fa9abf889a82f1129609ee9630575ff884eb2b62c877d4429fdbe454e2788d93d8305a6b2b9a8cbbc1e77716b5fc66e476b2f1fe1d
SSDEEP 12288:hpBje9UQV4cTsq5lqNlfzupIysdpu3FGYhoqFLPyI4hBKiB:hpBje9UQV4cTsq5lqNNupCG3MQLFb+K
TLSH
T129154B66FB90804CC13B84B0D93593B3EF907CEE4B107AE351E2CA562AB7ED96D35215
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

751296

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ggml-base

quantize_row_q5_0_ref quantize_row_q4_1_ref ggml_free quantize_row_q4_0_ref quantize_row_q2_0_ref quantize_row_q1_0_ref ggml_backend_buft_alloc_buffer ggml_get_no_alloc quantize_row_q3_K_ref quantize_row_q5_1_ref quantize_row_q2_K_ref ggml_new_tensor_1d ggml_new_buffer ggml_unravel_index ggml_get_unary_op ggml_get_glu_op ggml_threadpool_params_default ggml_log_internal quantize_row_mxfp4_ref ggml_aligned_free ggml_critical_section_start ggml_critical_section_end ggml_guid_matches ggml_backend_buft_is_host ggml_backend_reg_dev_get ggml_backend_cpu_buffer_from_ptr ggml_backend_cpu_buffer_type ggml_nbytes ggml_type_name ggml_time_us ggml_get_type_traits ggml_rope_yarn_corr_dims ggml_get_data_f32 ggml_is_contiguous_channels ggml_is_scalar ggml_element_size ggml_fp16_to_fp32_row ggml_is_contiguous_1 ggml_can_repeat ggml_is_contiguous_rows quantize_iq4_xs quantize_row_iq4_nl_ref quantize_row_tq2_0_ref quantize_row_tq1_0_ref ggml_aligned_malloc quantize_row_q8_K_ref quantize_row_q6_K_ref quantize_row_q5_K_ref quantize_row_nvfp4_ref ggml_n_dims quantize_row_q4_K_ref ggml_init ggml_are_same_shape ggml_is_contiguous ggml_is_empty ggml_is_quantized ggml_op_name ggml_row_size ggml_type_size ggml_blck_size ggml_nrows ggml_nelements ggml_abort

kernel32

GetCurrentProcessId QueryPerformanceCounter SleepConditionVariableSRW WakeAllConditionVariable GetCurrentThreadId ReleaseSRWLockExclusive GetCurrentThread SetThreadPriority SetThreadInformation GetLastError SetThreadAffinityMask GlobalMemoryStatusEx GetSystemTimeAsFileTime DisableThreadLibraryCalls AcquireSRWLockExclusive InitializeSListHead

advapi32

RegOpenKeyExA RegCloseKey RegQueryValueExA

vcomp140

_vcomp_fork _vcomp_set_num_threads _vcomp_single_end _vcomp_barrier omp_get_thread_num omp_get_num_threads _vcomp_single_begin

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__std_type_info_destroy_list memmove _purecall _CxxThrowException __std_exception_destroy __std_exception_copy memset memcpy __C_specific_handler

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __stdio_common_vfprintf

api-ms-win-crt-math-l1-1-0

truncf ldexp expf tanhf roundf expm1f fmaxf powf fminf erff sqrtf sinf logf cosf log2

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-environment-l1-1-0

getenv _putenv_s

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-heap-l1-1-0

malloc _callnewh free

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _execute_onexit_table _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _cexit _initterm _initterm_e _initialize_onexit_table _register_onexit_function

ggml_backend_cpu_init ggml_backend_cpu_reg ggml_backend_cpu_set_abort_callback ggml_backend_cpu_set_n_threads ggml_backend_cpu_set_threadpool ggml_backend_cpu_set_use_ref ggml_backend_is_cpu ggml_cpu_bf16_to_fp32 ggml_cpu_fp16_to_fp32 ggml_cpu_fp32_to_bf16 ggml_cpu_fp32_to_fp16 ggml_cpu_fp32_to_fp32 ggml_cpu_fp32_to_i32 ggml_cpu_get_rvv_vlen ggml_cpu_get_sve_cnt ggml_cpu_has_amx_int8 ggml_cpu_has_arm_fma ggml_cpu_has_avx ggml_cpu_has_avx2 ggml_cpu_has_avx512 ggml_cpu_has_avx512_bf16 ggml_cpu_has_avx512_vbmi ggml_cpu_has_avx512_vnni ggml_cpu_has_avx_vnni ggml_cpu_has_bmi2 ggml_cpu_has_dotprod ggml_cpu_has_f16c ggml_cpu_has_fma ggml_cpu_has_fp16_va ggml_cpu_has_llamafile ggml_cpu_has_matmul_int8 ggml_cpu_has_neon ggml_cpu_has_riscv_v ggml_cpu_has_sme ggml_cpu_has_sme2 ggml_cpu_has_sse3 ggml_cpu_has_ssse3 ggml_cpu_has_sve ggml_cpu_has_vsx ggml_cpu_has_vxe ggml_cpu_has_wasm_simd ggml_cpu_init ggml_get_f32_1d ggml_get_f32_nd ggml_get_i32_1d ggml_get_i32_nd ggml_get_type_traits_cpu ggml_graph_compute ggml_graph_compute_with_ctx ggml_graph_plan ggml_is_numa ggml_new_f32 ggml_new_i32 ggml_numa_init ggml_set_f32 ggml_set_f32_1d ggml_set_f32_nd ggml_set_i32 ggml_set_i32_1d ggml_set_i32_nd ggml_threadpool_free ggml_threadpool_new ggml_threadpool_pause ggml_threadpool_resume

Sharing

General

Malware Config

Signatures

File Explorer

973691084ba6a133920754533b8f5080b8454d33265f50690c4a671955455c75

ggml-base

kernel32

advapi32

vcomp140

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

generic