General
- Target input.exe
- Size 9.9MB
- Sample260619-thhfeaaw9w
- SHA256 990e741a824e154815f60a6bd7a736d78d23a425235523de11370efc0e073571
- MD5 3ce0f9a1a34f20732c3e3380d4bc9593
- SHA1 32e278cc61d37b41c1d8a11e9822152ed8757dab
- SHA512 83e39c9bc59050692b3c01b5e3e72c7cc834d5d55e524ce9dcd1a186228fbe9d0eebad705a68b73d2d2aca4789231c3fb321593314511cbc476b600cc1886a9f
- SSDEEP 196608:GZZ810OWCesnDt2GhUW4fFDTSJu9ii+h:r1GC1nDthqfFDuYii+
- TLSH T1E4A633EDA490ACDDD227917A513185CBE5377D690304C9EB222433FE7F23AE45E26B90
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
input.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
input.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target input.exe
- Size 9.9MB
- SHA256 990e741a824e154815f60a6bd7a736d78d23a425235523de11370efc0e073571
- MD5 3ce0f9a1a34f20732c3e3380d4bc9593
- SHA1 32e278cc61d37b41c1d8a11e9822152ed8757dab
- SHA512 83e39c9bc59050692b3c01b5e3e72c7cc834d5d55e524ce9dcd1a186228fbe9d0eebad705a68b73d2d2aca4789231c3fb321593314511cbc476b600cc1886a9f
- SSDEEP 196608:GZZ810OWCesnDt2GhUW4fFDTSJu9ii+h:r1GC1nDthqfFDuYii+
- TLSH T1E4A633EDA490ACDDD227917A513185CBE5377D690304C9EB222433FE7F23AE45E26B90
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.