General
- Target windivert.exe
- Size 7.8MB
- Sample261026-trvgbsty5j
- SHA256 b8aa14b5f1b5b7a07180b490104f78d17abee506a635c94a6c014f33860203f7
- MD5 7162333f9481f23070e9607372e6eece
- SHA1 ebc8cfb4981d00d6cc9c7152dbfe07e54ae10c87
- SHA512 3b67a29105c813b801637faa3a22ada8e7d427046295ddd1c8378eba969c4dae59d4b8be6ddb4cfa88992aff8c9123eb500e520506828e2c36bdfe9d2ed3f4c2
- SSDEEP 98304:YKaeG7DVgjKddg15b6xI0DPnLMv7oEVyII+/xdNX6ZTH:PG19d88xI0j4v7kII+fN0
- TLSH T14F86F123A9916778C45AE1354622D022F762FC582B2593F3798DB2783B337F496B4BC1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
windivert.exe
Resource
win11ltsc2024-20260911-uk
1 signatures
150 seconds
Malware Config
Targets
-
- Target windivert.exe
- Size 7.8MB
- SHA256 b8aa14b5f1b5b7a07180b490104f78d17abee506a635c94a6c014f33860203f7
- MD5 7162333f9481f23070e9607372e6eece
- SHA1 ebc8cfb4981d00d6cc9c7152dbfe07e54ae10c87
- SHA512 3b67a29105c813b801637faa3a22ada8e7d427046295ddd1c8378eba969c4dae59d4b8be6ddb4cfa88992aff8c9123eb500e520506828e2c36bdfe9d2ed3f4c2
- SSDEEP 98304:YKaeG7DVgjKddg15b6xI0DPnLMv7oEVyII+/xdNX6ZTH:PG19d88xI0j4v7kII+fN0
- TLSH T14F86F123A9916778C45AE1354622D022F762FC582B2593F3798DB2783B337F496B4BC1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Looks for VirtualBox executables on disk