General

  • Target
    2026110451278.zip
  • Size 3.8MB
  • Sample261102-pa55aahv4v
  • SHA256 02f1f9ef5c5b0312692b19528cd50d0a3710232e0e2bf78c1825113690bd7ec0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • DLL Hijacking vulnerability 13 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 2026110451278.zip
    .zip 3.8MB
  • V753_20261102_V2.vhd
    .dmg .vhd 12.0MB
  • $RECYCLE.BIN/desktop.ini
    129B
  • Roboform-x64.dll
    .dll 1.4MB
  • System Volume Information/IndexerVolumeGuid
    76B
  • System Volume Information/WPSettings.dat
    12B
  • TaxFiling.exe
    .exe 4.5MB
  • msvcp120.dll
    .dll 644KB
  • msvcp140.dll
    .dll 572KB
  • msvcp140_1.dll
    .dll 25KB
  • msvcp140_2.dll
    .dll 252KB
  • msvcp140_atomic_wait.dll
    .dll 39KB
  • msvcp140_codecvt_ids.dll
    .dll 21KB
  • vccorlib140.dll
    .dll 336KB
  • vcruntime140.dll
    .dll 127KB
  • vcruntime140_1.dll
    .dll 58KB
  • vcruntime140_threads.dll
    .dll 27KB

2026110451278.zip

  • SHA256 02f1f9ef5c5b0312692b19528cd50d0a3710232e0e2bf78c1825113690bd7ec0
  • MD5 SHA1 SHA512 SSDEEP TLSH