General
- Target 5f476ca668d05fd05ee2cccc02d70910c8d6e9bc22abe0811d6e925d76b0ce50
- Size 1.8MB
- Sample260910-3zmk5aaj4s
- SHA256 5f476ca668d05fd05ee2cccc02d70910c8d6e9bc22abe0811d6e925d76b0ce50
- MD5 bf21d40b739105758dc6ee290341331f
- SHA1 622e8b1810e328b0c9be2275fdb212ea15175d9a
- SHA512 ec63556f974312c85e77843ec9e1ccf662f411444e498c377322715f6e987e4ba7467b1e40d99533ee775e3fd55f22312455de9603730e3e98d9dbc5725cb688
- SSDEEP 49152:vsLDZsvLQO2VhRLrs4ks9dqlUoU6sKK3+TM1:vOZsDQO2VhVg4ksrqUNbIU
- TLSH T12B9523D2E247C4FFFC5AC37AE187A13D7485B79784640F19AAFC880B1DE19140C67AA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5f476ca668d05fd05ee2cccc02d70910c8d6e9bc22abe0811d6e925d76b0ce50.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
5f476ca668d05fd05ee2cccc02d70910c8d6e9bc22abe0811d6e925d76b0ce50.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 5f476ca668d05fd05ee2cccc02d70910c8d6e9bc22abe0811d6e925d76b0ce50
- Size 1.8MB
- SHA256 5f476ca668d05fd05ee2cccc02d70910c8d6e9bc22abe0811d6e925d76b0ce50
- MD5 bf21d40b739105758dc6ee290341331f
- SHA1 622e8b1810e328b0c9be2275fdb212ea15175d9a
- SHA512 ec63556f974312c85e77843ec9e1ccf662f411444e498c377322715f6e987e4ba7467b1e40d99533ee775e3fd55f22312455de9603730e3e98d9dbc5725cb688
- SSDEEP 49152:vsLDZsvLQO2VhRLrs4ks9dqlUoU6sKK3+TM1:vOZsDQO2VhVg4ksrqUNbIU
- TLSH T12B9523D2E247C4FFFC5AC37AE187A13D7485B79784640F19AAFC880B1DE19140C67AA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess