General
- Target Döner.exe
- Size 8.9MB
- Sample260828-ctaq9sem8v
- SHA256 f96f92c2e4abc2b7c6138e38cdac96b0038260699c3c179a04372b20faebd778
- MD5 979d77a1b26d3770c068ceca69e1d11d
- SHA1 b5e93e78184ede1088a163b1b2113e95c79d199e
- SHA512 6f647f61b998a413a21956c37312c5e5b07060e9e972f014ec57354a19da5e1790576f48bd2975291b47383e65de0bddde264815b036dd299311f2750308018e
- SSDEEP 98304:0JROUedT/uvAy/jwNWnwTj0PU56uPTz3w2jC34:0POtZTdNWnwTjuU5tPfg+
- TLSH T1BD96E0A6A1AC46AEE47AF034C9926613F7F27C051371CFEB66D08D440E3F5D07A7990A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Döner.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Döner.exe
- Size 8.9MB
- SHA256 f96f92c2e4abc2b7c6138e38cdac96b0038260699c3c179a04372b20faebd778
- MD5 979d77a1b26d3770c068ceca69e1d11d
- SHA1 b5e93e78184ede1088a163b1b2113e95c79d199e
- SHA512 6f647f61b998a413a21956c37312c5e5b07060e9e972f014ec57354a19da5e1790576f48bd2975291b47383e65de0bddde264815b036dd299311f2750308018e
- SSDEEP 98304:0JROUedT/uvAy/jwNWnwTj0PU56uPTz3w2jC34:0POtZTdNWnwTjuU5tPfg+
- TLSH T1BD96E0A6A1AC46AEE47AF034C9926613F7F27C051371CFEB66D08D440E3F5D07A7990A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger