General
- Target TEARDROP_infected.zip
- Size 12.2MB
- Sample260903-c19h6ssyay
- SHA256 cf50e1d04848a4f4270b0e8e76922b4ffbd4435247e3741d1b197f5374d2f99c
- MD5 0f98d0dd6dad2d521399de717678307a
- SHA1 08b4f5bf88dbef589a676cbc40c4e2a3fe1daaff
- SHA512 da394a98e0acdc0d63d1481b33c5ccfb293683189c3ca52b21c1bba06cd3550431c67100cdaa01a2a206da25dee0e6c51ba176fdc4194af47d91b8419c0f76dd
- SSDEEP 393216:FHqOwlQkTvq2SIOW+EIWA7CX4VdgTe3b9:F0JTStA+Z/7CYdl
- TLSH T168D63321DD2C4F380F15AB0CE90AE8CA1B093A17749D2F35F31359763A5688FD71AE69
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
CPUIDHWMonitor.exe
Resource
win11-20260513-en
4 signatures
300 seconds
Malware Config
Targets
-
- Target CPUIDHWMonitor.exe
- Size 18.8MB
- SHA256 93c3fc2cf55dedbf9fe9325f7ed62aa39a289d5f83d6ddffdf282a1278b88c0d
- MD5 c263a3a82e0ac4a0c38afa6def80669d
- SHA1 7f46dd12ec28d245ba4fd578b84e71365077fcff
- SHA512 338acbbb4996f14bb14b6a282018f8c6ac7e3e3fe804f7dc48456e6093f59677506a8133f14c20f9333254e9d7eef81b421f89512bb7a07f38f4aebbdfa36885
- SSDEEP 393216:HevDtsswizD+ek5yd3ShUuLXSPKdMOd7JiWVKQ2v/1R0pUvt1QkZPk0H:ADOs5zDL/d3Xibd7c+bEzfFLH
- TLSH T11B17D0B8951E18C5FF61EDF985C5679C810D39723F283AA3B01EA300077247A5BE7D9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext