General
- Target loader.exe
- Size 13.8MB
- Sample260424-yllz8abs7r
- SHA256 d8809594785d9d33d0cb7399610f08dcc4bdfd379ad3a37991bc7f2c363fc4dc
- MD5 22bdfa48658b5839a920fa2c84cf64d6
- SHA1 81236a576717922e7f8ded0b71607fa622953319
- SHA512 6a55e90db9aa5c599430ded7e891e549b2f93f594f5a6c80b9fcf5ea1950be95222ea045e64d2cd542056d0325781af8786c44452a642736a5edeee6782b339c
- SSDEEP 196608:KeZsAulLV3fphUiuLIIHiLTKmn4bhFn50leFu1TnmHwXUZbD+DDvbq2YQ8F2lDrN:ytxRhUtLgemi3HWkeEQgcGM
- TLSH T16AE623EA50D431D4C4D78B34639F57CE61F1F5668C60A62937CB2C03EE31EAB9249A63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loader.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
loader.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target loader.exe
- Size 13.8MB
- SHA256 d8809594785d9d33d0cb7399610f08dcc4bdfd379ad3a37991bc7f2c363fc4dc
- MD5 22bdfa48658b5839a920fa2c84cf64d6
- SHA1 81236a576717922e7f8ded0b71607fa622953319
- SHA512 6a55e90db9aa5c599430ded7e891e549b2f93f594f5a6c80b9fcf5ea1950be95222ea045e64d2cd542056d0325781af8786c44452a642736a5edeee6782b339c
- SSDEEP 196608:KeZsAulLV3fphUiuLIIHiLTKmn4bhFn50leFu1TnmHwXUZbD+DDvbq2YQ8F2lDrN:ytxRhUtLgemi3HWkeEQgcGM
- TLSH T16AE623EA50D431D4C4D78B34639F57CE61F1F5668C60A62937CB2C03EE31EAB9249A63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger