General
- Target 8ec9fb2d9c4af7e533263975ab4333d3090749e338c9d2c2b10ac4c1ecb8fe83
- Size 2.2MB
- Sample260831-fgfcrsdm61
- SHA256 8ec9fb2d9c4af7e533263975ab4333d3090749e338c9d2c2b10ac4c1ecb8fe83
- MD5 e2a43161bc7fe60b1fe55319c0f4088c
- SHA1 6202e5019183f0bc5b2ec735ad46a57a136af40c
- SHA512 6583bed7df3398f3b0e4f3b70a96a755729d553b926e168c5208c625cbddadcfb87e8f4947c87abc8430835b271095979e7d447ef07c0e53885d067d3506525f
- SSDEEP 49152:llbmQzTMrVjuZz3yrBPpTmHquxvzJWt6KtqE3kzS/0l8saK:zmQzTMRjuZzyrBPlmHqCWt6Gbc/2K
- TLSH T1A8B533E99F9C0372C8858B70D5DA341BF1973B88F8B5680B3F99B548CD4A37E4676224
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8ec9fb2d9c4af7e533263975ab4333d3090749e338c9d2c2b10ac4c1ecb8fe83.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
8ec9fb2d9c4af7e533263975ab4333d3090749e338c9d2c2b10ac4c1ecb8fe83.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 8ec9fb2d9c4af7e533263975ab4333d3090749e338c9d2c2b10ac4c1ecb8fe83
- Size 2.2MB
- SHA256 8ec9fb2d9c4af7e533263975ab4333d3090749e338c9d2c2b10ac4c1ecb8fe83
- MD5 e2a43161bc7fe60b1fe55319c0f4088c
- SHA1 6202e5019183f0bc5b2ec735ad46a57a136af40c
- SHA512 6583bed7df3398f3b0e4f3b70a96a755729d553b926e168c5208c625cbddadcfb87e8f4947c87abc8430835b271095979e7d447ef07c0e53885d067d3506525f
- SSDEEP 49152:llbmQzTMrVjuZz3yrBPpTmHquxvzJWt6KtqE3kzS/0l8saK:zmQzTMRjuZzyrBPlmHqCWt6Gbc/2K
- TLSH T1A8B533E99F9C0372C8858B70D5DA341BF1973B88F8B5680B3F99B548CD4A37E4676224
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Deletes itself