General
- Target iphlpapi.zip
- Size 65.7MB
- Sample261017-kdaqbsea35
- SHA256 25028b75dd4eff63d6ff8a773730c6e42cfe7136e5c4b22c0406d90931fd3971
- MD5 4d458a22a216ff40862bf457411cea48
- SHA1 9d911de8deefd8ed1b314abdad4a05c98403c18e
- SHA512 756833fdcaeaaf54c57e8621acc4983cc00513d34a9950b9594ff061562b270383be513370e1692a17dcd6cc32c25ca24db29a5e8f257282b1d2d8873cd45c02
- SSDEEP 1572864:0E5b9Sl1Eln+nGqXGpFz1NrzobXx+FjZ8K+HPGcUXqD0l8:0+BSHa+nGqXE1xzobh+78DPmz8
- TLSH T1E2E733D79872AAE63E6190B30921C744F75E3486B53DA021E0D60232FADB7CBA31F553
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
iphlpapi.dll
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
iphlpapi.dll
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
metashape.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
metashape.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target iphlpapi.dll
- Size 6.5MB
- SHA256 dde19914fe4b569cf182b8b6a3eda485a31d9d0a8e3654d659d3d3baf403d09c
- MD5 9e898d21d590bc6f1ffbcf27e48852bf
- SHA1 58edf08f8f955890a701261f23bd6824c1a04673
- SHA512 96a1dfe9eeaebbe4ad8f7f4c1b203cc3648b551461eec399482c24d1351b2a89222c8fb9ba3b9b7a075874c47e461a57c90891436aa37ccf79acac4180b48c06
- SSDEEP 196608:T1DBRDaIerGZ+r/27Hd9N6ARqh1XsdIwQojy:xtZCrq+6J68qh1Xsd6
- TLSH T1656623AE62543368D41AC5389833BD45B2FA504F57E9C57E72CFBAC0272B911E682F07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target metashape.exe
- Size 133.9MB
- SHA256 274470839c8cf1565501b0fdbad655d75efcab358217218878f4d3000beccf9f
- MD5 ba4ce52d2968277592ec5ad5d6f171ce
- SHA1 a81ab6431d3b46a77762f6f7fcfd9a20793b3e0e
- SHA512 8c4c045be97fb094fe93a6fcece83f0ad5aaaf24aa2d64428371073a64ea07971a93ca7c2f20cad64937c16ffe31d84a94819963a0d2cc202810037bb5a36de1
- SSDEEP 786432:O9qGskcIcl44sTd+g3H3J/3AjNM6SGTrbT1GqhGBm6oNsjW4zLnrgdkvpsKjP2sN:bwo4449Aj6xbsdkvpztco
- TLSH T123688E5B619401DCE07AD07DCBA76D03E6B2340A03258BEB16D49A5E2F27ED45DBFB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10