General
- Target payload_decrypted.zip
- Size 17.0MB
- Sample260903-pczehssvhw
- SHA256 5fea021e4caaa6c036df4f895b6c6e126125a4c446794187b476e48513a1473a
- MD5 40e70b8d551f1916ef3ba288a1d6ba2b
- SHA1 8c1380bd75c4d2b98383a193b6c6032cf3d1c78d
- SHA512 10f5c0802864bfa0a1b67e7de75f129718fb9b565edaef523af27113c4ffb1fda301e808294874569919eec7e8418cc85ec4f6b17200c8817347edd808423202
- SSDEEP 6144:oZy75g2RYWi1Xmy+Qf/cMb0exTqaTDef9pqeBjLVaHQaCLNUVdX6hMKpg6LMNUQY:oZ4g2ATRTDsbVq7ArMS
- TLSH T1CB070036038147E6E2CC6BC0446B299D22B5F66239942794FF737BBEDC59AC79838107
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
IqlxPJZDO.cmd
Resource
win10v2004-20260513-en
5 signatures
300 seconds
Behavioral task
behavioral2
Sample
IqlxPJZDO.cmd
Resource
win10ltsc2021-20260513-en
5 signatures
300 seconds
Behavioral task
behavioral3
Sample
IqlxPJZDO.cmd
Resource
win11-20260513-en
5 signatures
300 seconds
Malware Config
Targets
-
- Target IqlxPJZDO.cmd
- Size 1KB
- SHA256 4294d454f92471b086997718776a542d46d441ed541e079289eab2a6a4883d49
- MD5 819aa8322dfa3bc9a8acdb6492f394cf
- SHA1 3b83ac9b5799dc765257fe409fcdde2e70e0413a
- SHA512 65bf347c695431b24ac41651414db37880171c04befd0a096a120f3e493104a489e1af8e00e7ef3cc990aef6127afdd27159da4dddc1c36dc7454743db8ece33
- TLSH T1F231DB46B012481D90B037BA4B318733634EA2C33E81F5ACB0B4DC6974CF26EB6B11E8
- MD5 SHA1 SHA512 TLSH
-
Suspicious use of NtSetInformationThreadHideFromDebugger