General
- Target mao.exe
- Size 69.8MB
- Sample260424-vg366afv5p
- SHA256 d91f206067f1f5e9ec2d0d1c2b2cf57a0dd24c3d37f10ab44a0bb1f41c49d89d
- MD5 c458eca9b86c31bb16826f668a2e9e1b
- SHA1 7863a66d8dadaf4c8c69f7618e33b640f8f03897
- SHA512 09f43bbf44d613590dc530bc559ec4dcae4f511c3b6c6d9dd389bf6d478ae556dc3b863e122bb0665f621b52c716f450650975dbbf753c2c9f06fdd219770af0
- SSDEEP 1572864:1nddZn0XJVrvo2pUg9NoX0RbuQsGQUQ1fadunnM9lNH4aOU8od/xEldk:DCv7ig9NXbHIM9lNY6El
- TLSH T18DF7339099708187ED97523F54E98137B2F2B4706AA647CB07D802853ED72CBAC3D7B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
mao.exe
Resource
win10v2004-20260130-it
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
mao.exe
Resource
win11-20260130-it
3 signatures
900 seconds
Behavioral task
behavioral3
Sample
SUS.pyc
Resource
win10v2004-20260130-it
3 signatures
900 seconds
Behavioral task
behavioral4
Sample
SUS.pyc
Resource
win11-20260130-it
3 signatures
900 seconds
Malware Config
Targets
-
- Target mao.exe
- Size 69.8MB
- SHA256 d91f206067f1f5e9ec2d0d1c2b2cf57a0dd24c3d37f10ab44a0bb1f41c49d89d
- MD5 c458eca9b86c31bb16826f668a2e9e1b
- SHA1 7863a66d8dadaf4c8c69f7618e33b640f8f03897
- SHA512 09f43bbf44d613590dc530bc559ec4dcae4f511c3b6c6d9dd389bf6d478ae556dc3b863e122bb0665f621b52c716f450650975dbbf753c2c9f06fdd219770af0
- SSDEEP 1572864:1nddZn0XJVrvo2pUg9NoX0RbuQsGQUQ1fadunnM9lNH4aOU8od/xEldk:DCv7ig9NXbHIM9lNY6El
- TLSH T18DF7339099708187ED97523F54E98137B2F2B4706AA647CB07D802853ED72CBAC3D7B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target SUS.pyc
- Size 8KB
- SHA256 32fcb6f1816ba2ed807a0aa54e1b151c89e9df927e7fe7731e59582f7eeaa9a7
- MD5 aa9a4ddf6662e7fa5c8b8be92ff10d20
- SHA1 0d34cd3d63d9233e1d8a599cd1da769f92d59f42
- SHA512 fd3e0fced12bcf3743663d36f86ab9a3d6bd8116332aa9a7d8420aedd86087f986880917c699bc55d7a855b11e86c5769a33ea346fc74b5c6f52d02aa4bc79d8
- SSDEEP 192:mIMcdCNBTsP+p5NRinBHmxfUZ5bTuD41IYMxzP:7McYNBgAsYe7TjTMd
- TLSH T17002D7BA4D8A1927EED6E57071C2EF94E323C181B9408717F92D68FD0ECA306459D31E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10