General
- Target 5159cd1a7155af35c3b02405b7dffd543d18eda28acf6b87deee860a0dfa944b
- Size 2.3MB
- Sample260831-fe17fseg24
- SHA256 5159cd1a7155af35c3b02405b7dffd543d18eda28acf6b87deee860a0dfa944b
- MD5 221f2a14423c88f3d39ed58e0d87d980
- SHA1 4e4b66d3d2fdfba6990c1174942bfe8876cb8f3e
- SHA512 4e1c1b7d179b3af5ea7cf1daea1f5e461e3272a47ef5998971566c077e6bf5911db1828ad3124bfa71d45051dc06a6d2d8fc31aab1e985fdacb4ad154f3e2f6b
- SSDEEP 49152:Lp+PboqqZB5OqQxlwCktN9SO7kmboQkhaCUSTMrVEpfSX:Lp+j0+bwCBOgioP0ChTMREpfSX
- TLSH T142B5230A71F509F5E02BCE30E5FB56BC76753F090828682B47A6EA156CB63E22D1335D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5159cd1a7155af35c3b02405b7dffd543d18eda28acf6b87deee860a0dfa944b.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
5159cd1a7155af35c3b02405b7dffd543d18eda28acf6b87deee860a0dfa944b.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 5159cd1a7155af35c3b02405b7dffd543d18eda28acf6b87deee860a0dfa944b
- Size 2.3MB
- SHA256 5159cd1a7155af35c3b02405b7dffd543d18eda28acf6b87deee860a0dfa944b
- MD5 221f2a14423c88f3d39ed58e0d87d980
- SHA1 4e4b66d3d2fdfba6990c1174942bfe8876cb8f3e
- SHA512 4e1c1b7d179b3af5ea7cf1daea1f5e461e3272a47ef5998971566c077e6bf5911db1828ad3124bfa71d45051dc06a6d2d8fc31aab1e985fdacb4ad154f3e2f6b
- SSDEEP 49152:Lp+PboqqZB5OqQxlwCktN9SO7kmboQkhaCUSTMrVEpfSX:Lp+j0+bwCBOgioP0ChTMREpfSX
- TLSH T142B5230A71F509F5E02BCE30E5FB56BC76753F090828682B47A6EA156CB63E22D1335D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Deletes itself