General
- Target DK4-NB.7z
- Size 17.0MB
- Sample261029-eh2rqag18x
- SHA256 cf13d93dec4a2fd1f8f1889572ecf8bf9edb9e335e8f0d6e126611ca0fae8e2c
- MD5 355e7a4e5054e7db678622b3f30bc32e
- SHA1 9e0bf30db52d963a7ffb7018580c0ba912674b2a
- SHA512 b19d5bf4cd2d5b81cd6eb63c62014586ef1a4c23c0ea1be896634b6186bcc9c22b6ba219bffd9f7d6db399fc8b3ecd35d5ac7460bd7ca41067c314332b84667f
- SSDEEP 393216:RuTKkYDhpHyEPVmBe6sHlx0fWQ8tDKvAU:K3YdpHymVSsHb0OQ8tDWAU
- TLSH T1070733EEFEC4CC8B63E01A88AE7755A15125FD37B73C28ADDB55BC46E9008304C785A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
28T0K.dll
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
28T0K.dll
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
uzZN66l.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral4
Sample
uzZN66l.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 28T0K.dll
- Size 4.0MB
- SHA256 2ce2bc485adb69187c66a51ec1a11390c2d9904df9611211834039847a52d53a
- MD5 6f7ba98ff556445dd3feacd124e885e1
- SHA1 05b443647d118513e7e8fb15eac4156ac9dff022
- SHA512 ba32205bc3fcfdf436410376d564a937c1c9523b8ceba8c929059905490a1b4c857fa96061511b6a45634e04e3e4eda97a66219b156bab7f539bcd7246e0d022
- SSDEEP 98304:dFC6Ms3QfhOPN6KMbKKsbFizAsKV+diyNN/zV5VDSvY:dQ6MsOhANlZxiAnVSioDS
- TLSH T1E016120368C42175F6B7D712779B845EE3C270497A866C5F2682094242F1EE7BB873AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target uzZN66l.exe
- Size 81KB
- SHA256 23e3ad6cd4bb5cec331f28257913de316056dc41f2b5e612b64c68a35ef55544
- MD5 eba38ee2d8a7c8f745400acdf35d42db
- SHA1 f8f180dc4ebd068bb907bf24578dc189e0a33630
- SHA512 489f6108e9d2cf938b18bcbb40b205d4083002a3bf334fc888aa63f1012f4bdaea66979c3e410bd76911ce19170c3246371a690f90591bfbddd5dad29d7d2f8a
- SSDEEP 1536:omYSYxGfIZnRnD6M7EFOUa5vcphtUnbKXF4O7W:nYFZnRDGd2vCXUbK1RW
- TLSH T12683B50263E94619F1F77A346AB652305E777C91AE38C68E0298911D1FF3E90CD74BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Modifies file permissions