General
- Target Nighty_logger.exe
- Size 99.1MB
- Sample261024-3l56basx5p
- SHA256 55e023fe8a8e1855bc34064d5fe4d7f727ba8d83f7242a4787383f4cd09748f9
- MD5 ac5843568e3b1a3b5d47d026807c27b9
- SHA1 f99b19fb10dbb604a8c5692ea518e7a925653a49
- SHA512 9f2ae1ae1ad67dd93f609c5a78789024e8d05206c80e567b4313cddc35daad30eed946f47d7755116f8ce8c7d4a12a623604c7e4424e6aa5ed9f25d2fa974f27
- SSDEEP 3145728:nHddukNqDSC++Py5jvLEWAyq3o2IIi+zjZiv:nHuChCBy5jvi3zIbiti
- TLSH T1D5383383AE56112BE1D75978E469CD14B897B0CF8B71876728A015CF4287AC8CDFEF60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
Nighty_logger.exe
Resource
win11-20260911-en
22 signatures
900 seconds
Malware Config
Targets
-
- Target Nighty_logger.exe
- Size 99.1MB
- SHA256 55e023fe8a8e1855bc34064d5fe4d7f727ba8d83f7242a4787383f4cd09748f9
- MD5 ac5843568e3b1a3b5d47d026807c27b9
- SHA1 f99b19fb10dbb604a8c5692ea518e7a925653a49
- SHA512 9f2ae1ae1ad67dd93f609c5a78789024e8d05206c80e567b4313cddc35daad30eed946f47d7755116f8ce8c7d4a12a623604c7e4424e6aa5ed9f25d2fa974f27
- SSDEEP 3145728:nHddukNqDSC++Py5jvLEWAyq3o2IIi+zjZiv:nHuChCBy5jvi3zIbiti
- TLSH T1D5383383AE56112BE1D75978E469CD14B897B0CF8B71876728A015CF4287AC8CDFEF60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger