General
- Target SacredWare.exe
- Size 25.9MB
- Sample260522-yetfqags8x
- SHA256 e08217034a0a61d40132aa747f70fb1e3c031010a65219f0a66ba0dc7304e348
- MD5 5af5e60adcd6da451717c69a3abb15f8
- SHA1 3ad7cc3205822858a7d33d55962907bb19515ed6
- SHA512 2ffc5c0ea019d0b495261841382a82bfbaabca8f97d7d83a4365447776f285909bf501bf75777cca7275b82058b8b5d4d7340be0a61e9f93d82bcc197b67a60e
- SSDEEP 786432:duaAYAl0LMBdD+mB5bK4Tb04pvx3cV3NV:d7AYyTfD+mB5b1f0ovx3e
- TLSH T15057336AF9490AECCD2DC87D76822515BB14700D4F1511F22AF3A3197A32D42AB7CF9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SacredWare.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
SacredWare.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target SacredWare.exe
- Size 25.9MB
- SHA256 e08217034a0a61d40132aa747f70fb1e3c031010a65219f0a66ba0dc7304e348
- MD5 5af5e60adcd6da451717c69a3abb15f8
- SHA1 3ad7cc3205822858a7d33d55962907bb19515ed6
- SHA512 2ffc5c0ea019d0b495261841382a82bfbaabca8f97d7d83a4365447776f285909bf501bf75777cca7275b82058b8b5d4d7340be0a61e9f93d82bcc197b67a60e
- SSDEEP 786432:duaAYAl0LMBdD+mB5bK4Tb04pvx3cV3NV:d7AYyTfD+mB5b1f0ovx3e
- TLSH T15057336AF9490AECCD2DC87D76822515BB14700D4F1511F22AF3A3197A32D42AB7CF9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates processes with tasklist