General
- Target ZZMARKfLYaNsYRYfle.exe
- Size 1.6MB
- Sample260908-vk628avfka
- SHA256 c7d441ebdd68b6287a4499ca14b330e26b10cd7024c42728c90007800d5035df
- MD5 39b528ec34b371664f39e8a7c78d59d9
- SHA1 c3983a61a60c6264d897bfa83fb16583cc13748f
- SHA512 c9b5c60cb54535d01d4b4ce9b0232e55990fda6812f83be2df8e3d0e1daac809b4e3ddf0b229c6eda0a17dc3a3f2e8815238f33c7cffd3bc80e39a4817a1e201
- SSDEEP 24576:EhME5ydPF8YjUnFK0BV7hteNCKqdhNmhK3+kezFiAwfG7SEeW5A8R:EhD4PF8YjH0JACKghNmE+kyFCoSEs8
- TLSH T1C7753A7AF2DDF25AD111D038BE067D47A910F49952287FAB22988C7113D3F88672CBD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ZZMARKfLYaNsYRYfle.exe
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ZZMARKfLYaNsYRYfle.exe
- Size 1.6MB
- SHA256 c7d441ebdd68b6287a4499ca14b330e26b10cd7024c42728c90007800d5035df
- MD5 39b528ec34b371664f39e8a7c78d59d9
- SHA1 c3983a61a60c6264d897bfa83fb16583cc13748f
- SHA512 c9b5c60cb54535d01d4b4ce9b0232e55990fda6812f83be2df8e3d0e1daac809b4e3ddf0b229c6eda0a17dc3a3f2e8815238f33c7cffd3bc80e39a4817a1e201
- SSDEEP 24576:EhME5ydPF8YjUnFK0BV7hteNCKqdhNmhK3+kezFiAwfG7SEeW5A8R:EhD4PF8YjH0JACKghNmE+kyFCoSEs8
- TLSH T1C7753A7AF2DDF25AD111D038BE067D47A910F49952287FAB22988C7113D3F88672CBD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger