General
- Target pmca-gui-v0.18-win.exe
- Size 9.7MB
- Sample260913-lxwbtaaa68
- SHA256 c10198b706c9416c42619c56ad3dc780706144fb5098377c5e45e35dcbfbf4f2
- MD5 59c7c137fecb1df0e70c20d36a84273f
- SHA1 cf28eff791fe8d627ffd2e9117340f09c60eaec6
- SHA512 8d427b46e3eea6f94748dc4f6d59fcff6e14d7719a5cd332f8eb086cee17f5e35a3d45a0923e5d6e54c6d30073193535a5b21234370be4f795c72aa56842422b
- SSDEEP 196608:y+CtwRZSs7zZW3pTBXTWnZjN/OBFSPLVqq6ECvdbEJWNqdr2rZmtVH8pfFjj51:y+CtwRIgZW3/mATKUXEJW4IVmOT
- TLSH T1E1A63323DAB0C87BF5E41B37A1E5D43B6C11BA348B644197AB883D6440F42647F32E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
pmca-gui-v0.18-win.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
pmca-gui-v0.18-win.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
pmca-gui.pyc
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
pmca-gui.pyc
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target pmca-gui-v0.18-win.exe
- Size 9.7MB
- SHA256 c10198b706c9416c42619c56ad3dc780706144fb5098377c5e45e35dcbfbf4f2
- MD5 59c7c137fecb1df0e70c20d36a84273f
- SHA1 cf28eff791fe8d627ffd2e9117340f09c60eaec6
- SHA512 8d427b46e3eea6f94748dc4f6d59fcff6e14d7719a5cd332f8eb086cee17f5e35a3d45a0923e5d6e54c6d30073193535a5b21234370be4f795c72aa56842422b
- SSDEEP 196608:y+CtwRZSs7zZW3pTBXTWnZjN/OBFSPLVqq6ECvdbEJWNqdr2rZmtVH8pfFjj51:y+CtwRIgZW3/mATKUXEJW4IVmOT
- TLSH T1E1A63323DAB0C87BF5E41B37A1E5D43B6C11BA348B644197AB883D6440F42647F32E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target pmca-gui.pyc
- Size 14KB
- SHA256 d283f5f9ac522e0f186516849258b3929cd3d312559527cefc77a79884594826
- MD5 1f281a7d08e323f2f41c7aa67e61827b
- SHA1 8514fb613ace0214c8c90f4fab4d157bb0b18acb
- SHA512 ad9ee6daf473f9bbaaab0bd8f212285c4931887f0f27743a0c6d12894899af4401f844a67c5f18ca7ed281a3fa6b5e5bf07e4199e78ff6745f9e45e78f546004
- SSDEEP 384:u55H0PgHnF0DSypM1DZ1NS1FoqrcD+iB6U1Qg7W1IEVV1j:uHH2gHmDSypM1DZ1NS1mqs+iBl137W1T
- TLSH T11C6241C596529ABBFEE8F3FB414A4310277B4636234EE397686880BE1C573C45C35BA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10