General
- Target DEMSmacro 1.0.3.exe
- Size 30.7MB
- Sample260620-xrchash14v
- SHA256 8b3f9a8ce1fff386d16368dbd2f0680195dda54a7bd6724dd4ae4014da275072
- MD5 fd3c891415b1cc2b1b75988358caa4bd
- SHA1 d3de8a70746a300f23654ea18f3f9d2dcc8989f1
- SHA512 9a6b4e3c377c1932ddf395488d9379fb57ef9702f0c04a6c2779d28186395f785b4d2da01cf1b4e14caf97927ae88d361558187ca5827e01f263304f39dec546
- SSDEEP 786432:h2G4TLcNOCXRraoKvuToWAGWJtZq52Bzdn77epq/:6TIAChrG0oZ5Dq52BZvsm
- TLSH T19967338D77D01CA6F84692399EE3563693E2B5302F20CA8F13D64BA51EB31C88D79774
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
DEMSmacro 1.0.3.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
DEMSmacro 1.0.3.exe
Resource
win11ltsc2024-20260617-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target DEMSmacro 1.0.3.exe
- Size 30.7MB
- SHA256 8b3f9a8ce1fff386d16368dbd2f0680195dda54a7bd6724dd4ae4014da275072
- MD5 fd3c891415b1cc2b1b75988358caa4bd
- SHA1 d3de8a70746a300f23654ea18f3f9d2dcc8989f1
- SHA512 9a6b4e3c377c1932ddf395488d9379fb57ef9702f0c04a6c2779d28186395f785b4d2da01cf1b4e14caf97927ae88d361558187ca5827e01f263304f39dec546
- SSDEEP 786432:h2G4TLcNOCXRraoKvuToWAGWJtZq52Bzdn77epq/:6TIAChrG0oZ5Dq52BZvsm
- TLSH T19967338D77D01CA6F84692399EE3563693E2B5302F20CA8F13D64BA51EB31C88D79774
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.