General
- Target CDXTOOLV4.7.exe
- Size 16.2MB
- Sample260425-atlsesh13y
- SHA256 efa419bce735279690fb8bd8f577c467cedd6b266360789d5b2c13549f2558fb
- MD5 8114dee77c0979c9f167b752b423d63f
- SHA1 f5f699ec3631ef57f2c859b617b4254cec1e83dd
- SHA512 ae4989b66d04e5429d51873315d91c987778587caba85217dd623859c1a71d19b7c04a0d2b4257ba5b522957ef8696d944dece24710092ea33278600b50461d5
- SSDEEP 393216:5naOcX/xYNAB9d0oBQUP0jX70c88RpyBNPIYcpB9tzUMyUk+g70i3JS:NaxYmjWoBX0zILBNPjcr9dUuav3
- TLSH T15D0733B8E4D0E514E625D67CE4B567E2F3998038C381E2F7E6D2307D6E0668077277A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CDXTOOLV4.7.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
CDXTOOLV4.7.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target CDXTOOLV4.7.exe
- Size 16.2MB
- SHA256 efa419bce735279690fb8bd8f577c467cedd6b266360789d5b2c13549f2558fb
- MD5 8114dee77c0979c9f167b752b423d63f
- SHA1 f5f699ec3631ef57f2c859b617b4254cec1e83dd
- SHA512 ae4989b66d04e5429d51873315d91c987778587caba85217dd623859c1a71d19b7c04a0d2b4257ba5b522957ef8696d944dece24710092ea33278600b50461d5
- SSDEEP 393216:5naOcX/xYNAB9d0oBQUP0jX70c88RpyBNPIYcpB9tzUMyUk+g70i3JS:NaxYmjWoBX0zILBNPjcr9dUuav3
- TLSH T15D0733B8E4D0E514E625D67CE4B567E2F3998038C381E2F7E6D2307D6E0668077277A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.