General
- Target SacredWare.exe
- Size 37.4MB
- Sample260516-1eq2psds3q
- SHA256 4de4e05b3b9779b79b6970d2626355fc5c9e65ecb7062809bb27a4582267d064
- MD5 fd05bd417064eb2643b6295b61f5cf16
- SHA1 e63baeabc42d9dfe17e46531ae7253b6752b0dda
- SHA512 2d381e11eaea911307f83e34d249bb84cb29fe66a64f766a77f7be99a374d9459e96c6720b9933679acbd038f33e5d016d2e6f76904fecf40fbbd71e7a65eae3
- SSDEEP 786432:qHzOS9B4PBYKvxe2vRsWutIWJSkCXBBSpQIntFxotEak8GpLOPbr7stZq57K7eK:WzOS92425aJ7CXBB92Fq1COjr7sDq57a
- TLSH T165873378A3C815EAEC63633DEE62D952FBD5781A2F52CC2E079202253FB7144057AD6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
SacredWare.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
SacredWare.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target SacredWare.exe
- Size 37.4MB
- SHA256 4de4e05b3b9779b79b6970d2626355fc5c9e65ecb7062809bb27a4582267d064
- MD5 fd05bd417064eb2643b6295b61f5cf16
- SHA1 e63baeabc42d9dfe17e46531ae7253b6752b0dda
- SHA512 2d381e11eaea911307f83e34d249bb84cb29fe66a64f766a77f7be99a374d9459e96c6720b9933679acbd038f33e5d016d2e6f76904fecf40fbbd71e7a65eae3
- SSDEEP 786432:qHzOS9B4PBYKvxe2vRsWutIWJSkCXBBSpQIntFxotEak8GpLOPbr7stZq57K7eK:WzOS92425aJ7CXBB92Fq1COjr7sDq57a
- TLSH T165873378A3C815EAEC63633DEE62D952FBD5781A2F52CC2E079202253FB7144057AD6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Enumerates processes with tasklist