General
- Target Loader.7z
- Size 9.5MB
- Sample260516-ta2jbafv2x
- SHA256 8c4f5b8941cea5e1ee7f394196210f4f4572ca54243091d23762c7370cc446c2
- MD5 aeb27ba99dba0fe7df745d3be3eeb0f7
- SHA1 2c43807edec95dcbdccd530f8de53d78ee989789
- SHA512 97723b2b71835bc03b7d3b105f1bda9df87e481a07b4cda88e6828c164e7da99b270d4995094fec6110145d2378682dcf8d7283abea725e375519cfa0c419d3a
- SSDEEP 196608:V4pkP26GYk2fKxbAs1GlQkBpwGdPDP4EKqYwCiGCmOlKFdfWUQRDuX66bIO:AkP/fk2f2/18pwGVPEqfCBbTfWUas6hO
- TLSH T1E5A633D337C57B18E32CAB783CC5B2287478F8BC79293B6A10D00AB5B79C5E0E595A15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Loader.7z
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Loader.7z
Resource
win11-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Loader.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
Loader.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Loader.7z
- Size 9.5MB
- SHA256 8c4f5b8941cea5e1ee7f394196210f4f4572ca54243091d23762c7370cc446c2
- MD5 aeb27ba99dba0fe7df745d3be3eeb0f7
- SHA1 2c43807edec95dcbdccd530f8de53d78ee989789
- SHA512 97723b2b71835bc03b7d3b105f1bda9df87e481a07b4cda88e6828c164e7da99b270d4995094fec6110145d2378682dcf8d7283abea725e375519cfa0c419d3a
- SSDEEP 196608:V4pkP26GYk2fKxbAs1GlQkBpwGdPDP4EKqYwCiGCmOlKFdfWUQRDuX66bIO:AkP/fk2f2/18pwGVPEqfCBbTfWUas6hO
- TLSH T1E5A633D337C57B18E32CAB783CC5B2287478F8BC79293B6A10D00AB5B79C5E0E595A15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Loader.exe
- Size 11.2MB
- SHA256 2602fdd59c3e30bfc2dac580ee2f16b846a82c41c0af3f330067ac375f21395c
- MD5 15e4871eaeb0fe5d8932d10a3c25ccb7
- SHA1 f94a944ddd64e3a385918f310a8deb1116dc4fa9
- SHA512 1c6ef01118c00dade605793a009008be5778615074b0523cc1ef1ff3c860edef698046e2708f23597ba854ef43c9fa0d8e307dcc0f1097dfd5ce93abdf9229b5
- SSDEEP 196608:jDYrbmjFfXh6oqZeMb+I69Y2wkvJDOAMTqT2LMbpKorlWZEedmTiuwxVU:jDYrKpfXhckM8Y2wklObqyL4pMZbKQ
- TLSH T114C623D364FD62E1E8D34EA0E74E278D52D2B026E997792D37C21C025F34EA3854AD27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger