2026-10-15_088c0c311620684388023ea4af8725af_megazord

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-15_088c0c311620684388023ea4af8725af_megazord
Size 4.5MB
Sample261016-3weq4set7l
SHA256 29aad3608a9917e8f83016ce58a5e7f4e60216f829ec7b9f3119e6dfe1b5ebcc
MD5 088c0c311620684388023ea4af8725af
SHA1 35bb5b1a29e1c1097951e9675790019c9bcaf9ab
SHA512 1472c7e26c8337081e48aa053e990a6719e969e4dfc387cb82185967f6dad52efc06b41736ffd6ff9d6c1893b341cf4834df7fd842917f615f7b52eddafa961d
SSDEEP 49152:maV8403mDIvVEaTAM1nl4l7Et4f93JTEkCMMLMREDundSgtT9GbJYuiHyJruFzvS:1VspXz6hkun2eScNyuwEg
TLSH
T148264A42F55B58ACE196C87183069A335A2078DF17277DBB12C4A27C3F6EBA05F38716
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-15_088c0c311620684388023ea4af8725af_megazord

File Explorer

2026-10-15_088c0c311620684388023ea4af8725af_megazord

.exe 4.5MB

2026-10-15_088c0c311620684388023ea4af8725af_megazord

IMPHASH 1391157ed48a21114c5ef66278a80813
SHA256 29aad3608a9917e8f83016ce58a5e7f4e60216f829ec7b9f3119e6dfe1b5ebcc
MD5 088c0c311620684388023ea4af8725af
SHA1 35bb5b1a29e1c1097951e9675790019c9bcaf9ab
SHA512 1472c7e26c8337081e48aa053e990a6719e969e4dfc387cb82185967f6dad52efc06b41736ffd6ff9d6c1893b341cf4834df7fd842917f615f7b52eddafa961d
SSDEEP 49152:maV8403mDIvVEaTAM1nl4l7Et4f93JTEkCMMLMREDundSgtT9GbJYuiHyJruFzvS:1VspXz6hkun2eScNyuwEg
TLSH
T148264A42F55B58ACE196C87183069A335A2078DF17277DBB12C4A27C3F6EBA05F38716
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3344332

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

djk_fnemote.pdb

kernel32

SetLastError GetLastError CloseHandle IsDebuggerPresent RtlLookupFunctionEntry FormatMessageW InitializeSListHead GetSystemTimeAsFileTime IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter FindNextFileW CreateHardLinkW MoveFileExW CopyFileExW GetFinalPathNameByHandleW DeleteFileW ExitProcess GetProcessHeap HeapFree SetFilePointerEx SwitchToThread FindClose CreateThread HeapReAlloc GetCommandLineW GetModuleFileNameW WaitForSingleObject AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetSystemTimePreciseAsFileTime GetSystemInfo GetCurrentProcessId GetCurrentThreadId GetCurrentDirectoryW RtlCaptureContext WaitForSingleObjectEx LoadLibraryA GetProcAddress GetCurrentProcess lstrlenW CreateMutexA ReleaseMutex RtlVirtualUnwind WideCharToMultiByte GetModuleHandleW GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW FlsAlloc GetModuleHandleExW IsThreadAFiber FlsSetValue FlsFree HeapAlloc GetEnvironmentVariableW QueryPerformanceFrequency QueryPerformanceCounter GetModuleHandleA GetFullPathNameW FindFirstFileExW CreateFileW SetFileTime SetFileInformationByHandle GetFileInformationByHandle GetFileInformationByHandleEx FlushFileBuffers CreateDirectoryW

ntdll

NtReadFile NtWriteFile RtlNtStatusToDosError

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

bcryptprimitives

ProcessPrng

vcruntime140

__C_specific_handler __current_exception __current_exception_context _CxxThrowException memset memmove memcpy memcmp __CxxFrameHandler3

api-ms-win-crt-math-l1-1-0

atan2f acosf fmodf roundf cosf fmod floor trunc log2f fmaf fma log2 pow sin ceil round __setusermatherr sinf cos sqrt ldexp log atan exp

api-ms-win-crt-string-l1-1-0

wcslen strlen

api-ms-win-crt-heap-l1-1-0

realloc _set_new_mode free malloc calloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-runtime-l1-1-0

_initterm terminate _register_thread_local_exe_atexit_callback _c_exit _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit _cexit _seh_filter_exe _set_app_type __p___argv _get_initial_narrow_environment exit _initterm_e _exit __p___argc

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-15_088c0c311620684388023ea4af8725af_megazord

kernel32

ntdll

api-ms-win-core-synch-l1-2-0

bcryptprimitives

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic