004fdf6f6ebacf350f2367114ab8aa1d54e7a3860ec014c7d2717fdd6f9035e7[.]exe

Resubmissions

02/10/2026, 06:02

261002-gry4astsf18

02/10/2026, 05:54

261002-gl8esazdqg8

Sharing

Copy URL Twitter E-mail

General

Target
004fdf6f6ebacf350f2367114ab8aa1d54e7a3860ec014c7d2717fdd6f9035e7.exe
Size 400KB
Sample261002-gry4astsf1
SHA256 004fdf6f6ebacf350f2367114ab8aa1d54e7a3860ec014c7d2717fdd6f9035e7
MD5 80955df27c81bf5a4b481a07b9567c06
SHA1 0f9cf541561aa6181d379d6e87faec8f77a0ab7b
SHA512 4c6961806dc01166b8e47a81246dc35288ca06740f95a356525e3792a238ccdcd452e14c8ae334738d4ef3e56c19d887360a05416f423c97c5dc8436b91fcf48
SSDEEP 6144:h3bFte0kbp15x0M7iV8fEAJZsx3UiokNJwL:JFtSpzx5iV88AJZsx3UhL
TLSH
T10A947D06F686F132C11316F56E2BD36A8436B9625B340EC7FBC09D2D9E652D19B3630E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
004fdf6f6ebacf350f2367114ab8aa1d54e7a3860ec014c7d2717fdd6f9035e7.exe

File Explorer

004fdf6f6ebacf350f2367114ab8aa1d54e7a3860ec014c7d2717fdd6f9035e7.exe

.exe 400KB

004fdf6f6ebacf350f2367114ab8aa1d54e7a3860ec014c7d2717fdd6f9035e7.exe

IMPHASH 0bc4b03d8fce7d0f8070e3d6b8be4bec
SHA256 004fdf6f6ebacf350f2367114ab8aa1d54e7a3860ec014c7d2717fdd6f9035e7
MD5 80955df27c81bf5a4b481a07b9567c06
SHA1 0f9cf541561aa6181d379d6e87faec8f77a0ab7b
SHA512 4c6961806dc01166b8e47a81246dc35288ca06740f95a356525e3792a238ccdcd452e14c8ae334738d4ef3e56c19d887360a05416f423c97c5dc8436b91fcf48
SSDEEP 6144:h3bFte0kbp15x0M7iV8fEAJZsx3UiokNJwL:JFtSpzx5iV88AJZsx3UhL
TLSH
T10A947D06F686F132C11316F56E2BD36A8436B9625B340EC7FBC09D2D9E652D19B3630E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

221568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VerifyVersionInfoA GlobalUnlock FindFirstFileA GetLastError FindClose GetLocalTime FindNextChangeNotification WaitForMultipleObjects FindNextFileA FindFirstChangeNotificationA ContinueDebugEvent WaitForDebugEvent GetCurrentThreadId GetVersionExA GetCurrentProcessId GetSystemTime DeleteFileA UpdateResourceA BeginUpdateResourceA EndUpdateResourceA CreateFileA WaitForSingleObject SetFileTime WriteFile GetDriveTypeA GetVolumeInformationA GetFileAttributesA GetExitCodeProcess ReadProcessMemory TerminateProcess ReadFile GetEnvironmentVariableA GetShortPathNameA CreateDirectoryA GetLogicalDriveStringsA CopyFileA SetFileAttributesA OpenMutexA GetModuleFileNameA CreateMutexA GetFileTime CloseHandle GetTempPathA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP SetFilePointer GetLocaleInfoW HeapSize GetFileType SetHandleCount Sleep GlobalAlloc GetCurrencyFormatA GetCurrentThread GetTickCount GlobalLock QueryPerformanceCounter SetFirmwareEnvironmentVariableA GetCurrentProcess CreateProcessA GlobalMemoryStatus GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA InitializeCriticalSectionAndSpinCount LoadLibraryA GetStdHandle GetModuleHandleA GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID IsValidCodePage GetOEMCP GetACP SetLastError TlsFree TlsSetValue TlsAlloc InterlockedIncrement InterlockedDecrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetSystemTimeAsFileTime HeapReAlloc HeapAlloc GetModuleHandleW GetProcAddress ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind CompareStringA MultiByteToWideChar GetCPInfo CompareStringW LCMapStringA WideCharToMultiByte LCMapStringW HeapCreate VirtualFree VirtualAlloc TlsGetValue

user32

GetDesktopWindow EmptyClipboard GetClipboardData GetForegroundWindow GetFocus CloseClipboard wsprintfW GetCursorPos GetCaretPos GetActiveWindow OpenClipboard GetSystemMetrics SetClipboardData

advapi32

RegSetValueExA RegCloseKey RegEnumValueA RegOpenKeyExA RegCreateKeyExA RegQueryValueExA

dnsapi

DnsQuery_A DnsFree

ws2_32

closesocket socket sendto WSAStartup htons gethostbyname

version

VerQueryValueW GetFileVersionInfoSizeA GetFileVersionInfoA

wininet

InternetConnectA FtpOpenFileA InternetCrackUrlA InternetReadFile HttpOpenRequestA InternetCreateUrlA HttpAddRequestHeadersA FtpGetFileSize HttpSendRequestA InternetOpenA InternetCloseHandle HttpQueryInfoA