General
- Target Loader.exe
- Size 9.9MB
- Sample260608-rtknssfx9v
- SHA256 8ed2db783c6cdefbdf05d667fd5253ec4288672d6ba3f4a0f903ffa079bc4bd7
- MD5 21e5e5d88f51322c976041183383988e
- SHA1 829f9d9fce22362d24dbb20608b2d7cd5d48f476
- SHA512 4051e0375b0b598a2f4bc157ed5b2a9e7c420e1842ef1d6a3f5b30ba1bef9efe88d9811ced820cc18a84700f7cf03abaf230799b50bb614654c18291b86cb6d4
- SSDEEP 196608:yzuD2yzlYTa8oiCRMPZnbF4rOVwKQfMTXIi6XhxG+O/g2mA:QomTVCRMRegQf5hxy9
- TLSH T1ADA623D799FD12D7DD831EF4961A27CF57E0B013481AA92A37C4280BAE31CEF154693A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Loader.exe
Resource
win11-20260513-en
17 signatures
120 seconds
Malware Config
Targets
-
- Target Loader.exe
- Size 9.9MB
- SHA256 8ed2db783c6cdefbdf05d667fd5253ec4288672d6ba3f4a0f903ffa079bc4bd7
- MD5 21e5e5d88f51322c976041183383988e
- SHA1 829f9d9fce22362d24dbb20608b2d7cd5d48f476
- SHA512 4051e0375b0b598a2f4bc157ed5b2a9e7c420e1842ef1d6a3f5b30ba1bef9efe88d9811ced820cc18a84700f7cf03abaf230799b50bb614654c18291b86cb6d4
- SSDEEP 196608:yzuD2yzlYTa8oiCRMPZnbF4rOVwKQfMTXIi6XhxG+O/g2mA:QomTVCRMRegQf5hxy9
- TLSH T1ADA623D799FD12D7DD831EF4961A27CF57E0B013481AA92A37C4280BAE31CEF154693A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger