Resubmissions

30/09/2026, 00:15

260930-aj461sscpf

30/09/2026, 00:13

260930-ahy9daab795

General

  • Target
    netfw.zip
  • Size 7.2MB
  • Sample260930-aj461sscpf
  • SHA256 cfd6929d21ef9577b29f840ed2f6f586dbe3881af087c4325237479ce74eb1d7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 1 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • netfw.zip
    .zip 7.2MB
  • Get_Model_Forecast.bin
    1.6MB
  • NetClientDll.dll
    .dll 4.6MB
  • NetFW.exe
    .exe 577KB
  • Prism.Wpf.dll
    .dll 71KB
  • SonitusFXDelay.dll
    .dll 671KB
  • WinRaw.dll
    .dll 86KB
  • cache.dat
    1.2MB
  • concrt140.dll
    .dll 336KB
  • mfc140u.dll
    .dll 5.4MB
  • msvcp140.dll
    .dll 540KB
  • msvcp140_1.dll
    .dll 35KB
  • msvcp140_2.dll
    .dll 262KB
  • msvcp140_atomic_wait.dll
    .dll 40KB
  • sqlite3.dll
    .dll 1.2MB
  • vcruntime140.dll
    .dll 120KB
  • vcruntime140_1.dll
    .dll 46KB

netfw.zip

  • SHA256 cfd6929d21ef9577b29f840ed2f6f586dbe3881af087c4325237479ce74eb1d7
  • MD5 SHA1 SHA512 SSDEEP TLSH