General
- Target ProximityCommon.dll.exe
- Size 1.2MB
- Sample260907-hfcats1aka
- SHA256 c1d9893969924e90ea46cd51503168d0a301b7a7abbe3f3e92901fbdd7a6ecf1
- MD5 013bdc3073e5faec32427d3ac348bd3b
- SHA1 843fb4ec9bc399a57207963140a5e1a687847577
- SHA512 9bdea4063a114ddb763518878690c5a3e8ca11d934d6164a5f61c50179369d643e8a44058b8b2eb918f25fd099bca14b51f23e16e573d8820e3b9efc6f2bb368
- SSDEEP 24576:5eedoq0mjlOczKElRn801vwrpXdPISMRaWt:RhxbnRwrpZBxW
- TLSH T11A45B50AE722A6EDC866C5B8D1B35232E6797C0C803C7927CFD50F556BC0B60F56A74A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ProximityCommon.dll
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ProximityCommon.dll
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target ProximityCommon.dll.exe
- Size 1.2MB
- SHA256 c1d9893969924e90ea46cd51503168d0a301b7a7abbe3f3e92901fbdd7a6ecf1
- MD5 013bdc3073e5faec32427d3ac348bd3b
- SHA1 843fb4ec9bc399a57207963140a5e1a687847577
- SHA512 9bdea4063a114ddb763518878690c5a3e8ca11d934d6164a5f61c50179369d643e8a44058b8b2eb918f25fd099bca14b51f23e16e573d8820e3b9efc6f2bb368
- SSDEEP 24576:5eedoq0mjlOczKElRn801vwrpXdPISMRaWt:RhxbnRwrpZBxW
- TLSH T11A45B50AE722A6EDC866C5B8D1B35232E6797C0C803C7927CFD50F556BC0B60F56A74A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Suspicious use of NtSetInformationThreadHideFromDebugger