General
- Target server.exe
- Size 95KB
- Sample260429-wras2aet2v
- SHA256 38be2830eecba0ee415fc2e02981bacd5195b5bf10329358127dcf7afd08dbf7
- MD5 d40d35b8a2ad1e66c1c6c873b42c14d3
- SHA1 6f0c4a05b104d5988386faf229c4e2af4cd29977
- SHA512 d199858a5f2707f3f9d062e9e8a3780d63948c55d87dc1e65d62828f0aeafaf5415c1438011df3e755a9a5b61216192b160fae9018cf086090911a02dc2d5df7
- SSDEEP 1536:H7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfQw8NjmOp:b7DhdC6kzWypvaQ0FxyNTBfQr
- TLSH T12E938E41F7E241F7F6F1053500F6A52FEB3AA3285724A8DBCB5C2D529602AD0963D3E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
server.exe
Resource
win10v2004-20260130-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
server.exe
Resource
win11-20260130-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target server.exe
- Size 95KB
- SHA256 38be2830eecba0ee415fc2e02981bacd5195b5bf10329358127dcf7afd08dbf7
- MD5 d40d35b8a2ad1e66c1c6c873b42c14d3
- SHA1 6f0c4a05b104d5988386faf229c4e2af4cd29977
- SHA512 d199858a5f2707f3f9d062e9e8a3780d63948c55d87dc1e65d62828f0aeafaf5415c1438011df3e755a9a5b61216192b160fae9018cf086090911a02dc2d5df7
- SSDEEP 1536:H7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfQw8NjmOp:b7DhdC6kzWypvaQ0FxyNTBfQr
- TLSH T12E938E41F7E241F7F6F1053500F6A52FEB3AA3285724A8DBCB5C2D529602AD0963D3E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
1Remote System Discovery
1System Information Discovery
1System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1