General
-
Target
WPBE1877.exe
-
Size
498KB
-
Sample
230719-q1c2vsgd74
-
MD5
fe9db7933ebf3259b7e03cd0cee913cf
-
SHA1
071e14a82d9e5ee7f53d01ef86ddb5739fb03471
-
SHA256
bde6705bc56984fab54311198daaa4d44741a4e6805010d9830bf0fdf02c84ec
-
SHA512
4f10ae2d636ce4392ebb3b8ef52bd8cd9e1d32a6f9f5eead59bec1b9913137ea6b1a7a09b4fe0555abb6f5676d02f0805ac524da8c88a21544913a822d824341
-
SSDEEP
6144:gKoUOOEsBtk3FmS+51IbWrFmS+51I9WarGOrT89xp20CoFli60m:+UO+7iFmS+5ibWrFmS+5i9WaaOex86L
Behavioral task
behavioral1
Sample
WPBE1877.exe
Resource
win10-20230703-en
Malware Config
Targets
-
-
Target
WPBE1877.exe
-
Size
498KB
-
MD5
fe9db7933ebf3259b7e03cd0cee913cf
-
SHA1
071e14a82d9e5ee7f53d01ef86ddb5739fb03471
-
SHA256
bde6705bc56984fab54311198daaa4d44741a4e6805010d9830bf0fdf02c84ec
-
SHA512
4f10ae2d636ce4392ebb3b8ef52bd8cd9e1d32a6f9f5eead59bec1b9913137ea6b1a7a09b4fe0555abb6f5676d02f0805ac524da8c88a21544913a822d824341
-
SSDEEP
6144:gKoUOOEsBtk3FmS+51IbWrFmS+51I9WarGOrT89xp20CoFli60m:+UO+7iFmS+5ibWrFmS+5i9WaaOex86L
Score7/10-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Legitimate hosting services abused for malware hosting/C2
-