General
- Target test.exe
- Size 102.3MB
- Sample260207-wthawsgv9d
- SHA256 045a557d24bfd6dea64b4d179579114ed5fc1b261f76dc72b48a3a81f8bae382
- MD5 5d5ab0c67d455e829169f7ed6e518ffe
- SHA1 0ee7692fba9addbdc8b94e2f9b233b058061b772
- SHA512 d03ac8f4e1f05dd3b7eb870af19f2453b40d55582643a0722c80eb89e87f07bb3d08e77b433b04fc30576d2360c04e3127f7a88d9c6b6d5f89b96dae6e59d078
- SSDEEP 3145728:59dxgYRPSC++6y91EWFO/+jcvPOn36AeTXD26rY:59dxxaC4y9U/GcvG36A828
- TLSH T1AB383384BB44089AF95827368193E94C9F99F04DC7A8490793E4356A0C8F7DCEBBFE54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
test.exe
Resource
win11-20260130-en
4 signatures
900 seconds
Behavioral task
behavioral2
Sample
main.pyc
Resource
win11-20260130-en
4 signatures
900 seconds
Malware Config
Targets
-
- Target test.exe
- Size 102.3MB
- SHA256 045a557d24bfd6dea64b4d179579114ed5fc1b261f76dc72b48a3a81f8bae382
- MD5 5d5ab0c67d455e829169f7ed6e518ffe
- SHA1 0ee7692fba9addbdc8b94e2f9b233b058061b772
- SHA512 d03ac8f4e1f05dd3b7eb870af19f2453b40d55582643a0722c80eb89e87f07bb3d08e77b433b04fc30576d2360c04e3127f7a88d9c6b6d5f89b96dae6e59d078
- SSDEEP 3145728:59dxgYRPSC++6y91EWFO/+jcvPOn36AeTXD26rY:59dxxaC4y9U/GcvG36A828
- TLSH T1AB383384BB44089AF95827368193E94C9F99F04DC7A8490793E4356A0C8F7DCEBBFE54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target main.pyc
- Size 94KB
- SHA256 915fe25ec3553e148ffaf16ef8f552c6f6a23120283bdba8ab83cd87f1926e79
- MD5 449d842d18cf2a0c7487021d7ab69600
- SHA1 0d58613016eae9c27af61d9e90768aa1d5f2b377
- SHA512 5b90d729e2a2843c4bd93e72cc2a6c3af34af67f72b3587e2cd855453255b73e964b05bdcc05196895d81224fbe2eeaee35d66a547bec69c7c65812ab5684a7c
- SSDEEP 1536:IiVKHt/ExoAuj/tAgYfArY/ffTi3HTBvab9Irrh8udLDUn1wlCGnkUd:IiVw/ExFujVAgYfAM/ffTiXTBKI+u61e
- TLSH T1A393B4457B22C17FF858F379D416225AB374C8F5F310CB0B26A6D06AAC2A7593C661EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10