General
- Target 17ad820c6a27854ee3b63c7c43131a58eca48dba8ddb56405bf11059f4a41bed.exe
- Size 171KB
- Sample260831-lynclazbpb
- SHA256 17ad820c6a27854ee3b63c7c43131a58eca48dba8ddb56405bf11059f4a41bed
- MD5 2bab2264e435eaff6704550c01cd2ea1
- SHA1 3fdcebc9b8ca9438afc54b8807c165845cca2c7c
- SHA512 98c75c008034bcb2fd4ada8f0f06691b03a1918f39a28d8aacbe44ed6069ed5f9f046fe1f7042f29dba8d93fa1205baf51d7780693282721013cdfc8d587806d
- SSDEEP 3072:XuL3hi8lMcxVGbr+0nQ1yIRxjwqm0spsZcjhP2/8ZBi0kqscsGPpCXjDGHlxccZ7:X0hv5VQ63yMwPRpVtP2/oDsmpCvGHzbV
- TLSH T13A04F126B1A0CCA3E8E156710D7612F6E6FB9DA46014A7432F543F5B7CB61F2481F683
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
17ad820c6a27854ee3b63c7c43131a58eca48dba8ddb56405bf11059f4a41bed.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
17ad820c6a27854ee3b63c7c43131a58eca48dba8ddb56405bf11059f4a41bed.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 17ad820c6a27854ee3b63c7c43131a58eca48dba8ddb56405bf11059f4a41bed.exe
- Size 171KB
- SHA256 17ad820c6a27854ee3b63c7c43131a58eca48dba8ddb56405bf11059f4a41bed
- MD5 2bab2264e435eaff6704550c01cd2ea1
- SHA1 3fdcebc9b8ca9438afc54b8807c165845cca2c7c
- SHA512 98c75c008034bcb2fd4ada8f0f06691b03a1918f39a28d8aacbe44ed6069ed5f9f046fe1f7042f29dba8d93fa1205baf51d7780693282721013cdfc8d587806d
- SSDEEP 3072:XuL3hi8lMcxVGbr+0nQ1yIRxjwqm0spsZcjhP2/8ZBi0kqscsGPpCXjDGHlxccZ7:X0hv5VQ63yMwPRpVtP2/oDsmpCvGHzbV
- TLSH T13A04F126B1A0CCA3E8E156710D7612F6E6FB9DA46014A7432F543F5B7CB61F2481F683
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 381ce74fe2c93bd7f31faeb05bd223b25354a03b6ac3098145f5a943272c4c02
- MD5 f3fdb8089ad2271be558053c4f69f0bd
- SHA1 28656faf1d3679f8669938cf0be4735109ccad92
- SHA512 beea156cb0b8d713d4d1ac497c79fb619ec97ffcb86762c3491175fae8681834dc7a5a281885471d5a4a8483bc731c9864b5db389e1aef02d6d4cb259411c5c5
- SSDEEP 192:ZFiQJ77pJp17C8F1A5xjGNxrgFOgb7lrT/W93:R7pJp48F2exrg5F/W
- TLSH T106424B1583618EF2F5961E3C00667E2F2B79BE3416F140A39FE34481A99A1CF99B5392
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10