General
- Target Nighty_patched.exe
- Size 99.1MB
- Sample261024-3b6dbssx3j
- SHA256 535527c8cda47f6d5158f4fce7f94ff36ce021d7f002c58c32bb210b22e81439
- MD5 44407ab4d152eb3132de7dbf1f10c2db
- SHA1 bdbfcca183e57b7bcc06809f12a037ca5fc1d44f
- SHA512 7df4ec4bf65edfa5cbb7a383ac05855eb75947cea6c0b45a354f2936a9f2702cde53e4f58f71cff425cf97a219438d243fbe5bc54d711c96bc5bbe349aadc802
- SSDEEP 3145728:XHddukNqDSC++Py5jvLEWAyq3o2IIi+zjZiv:XHuChCBy5jvi3zIbiti
- TLSH T101383383AE56112BE1D35978E469CD14B897B0CF9B71876728A015CF4287AC8CDFEF60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
Nighty_patched.exe
Resource
win11-20260911-en
15 signatures
900 seconds
Malware Config
Targets
-
- Target Nighty_patched.exe
- Size 99.1MB
- SHA256 535527c8cda47f6d5158f4fce7f94ff36ce021d7f002c58c32bb210b22e81439
- MD5 44407ab4d152eb3132de7dbf1f10c2db
- SHA1 bdbfcca183e57b7bcc06809f12a037ca5fc1d44f
- SHA512 7df4ec4bf65edfa5cbb7a383ac05855eb75947cea6c0b45a354f2936a9f2702cde53e4f58f71cff425cf97a219438d243fbe5bc54d711c96bc5bbe349aadc802
- SSDEEP 3145728:XHddukNqDSC++Py5jvLEWAyq3o2IIi+zjZiv:XHuChCBy5jvi3zIbiti
- TLSH T101383383AE56112BE1D35978E469CD14B897B0CF9B71876728A015CF4287AC8CDFEF60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger