General
- Target dead.builder.exe
- Size 3.7MB
- Sample260623-2p154agx9k
- SHA256 2e1b2bc31d136b61deae063eb0c4c930f8146d5fd8d939e264c970ca53e98b51
- MD5 4d4442b8a2f0c35f764f75605c983312
- SHA1 acbcad4043ca50a054047620836c6553671e5249
- SHA512 546d08554cc99030f0b06c607deab2ad65bebcd3f5bdd5c5b166a2f9ef4973469a8ad33a71ee49d974a3349e61547ff7c52a1f5fbc1fe6a40f9a5ae450760110
- SSDEEP 98304:skjozJ9/im8XVBKl6tmJVPS47x/EaR5zNNHtFESGuA+iFiL:0zJpjS346tmJ1xsG53tFE9uAy
- TLSH T14F0601E033B586F5E2E59F7D01627CACCF361AD186F4EAAD0C8231D74AE27034D1695A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
dead.builder.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target dead.builder.exe
- Size 3.7MB
- SHA256 2e1b2bc31d136b61deae063eb0c4c930f8146d5fd8d939e264c970ca53e98b51
- MD5 4d4442b8a2f0c35f764f75605c983312
- SHA1 acbcad4043ca50a054047620836c6553671e5249
- SHA512 546d08554cc99030f0b06c607deab2ad65bebcd3f5bdd5c5b166a2f9ef4973469a8ad33a71ee49d974a3349e61547ff7c52a1f5fbc1fe6a40f9a5ae450760110
- SSDEEP 98304:skjozJ9/im8XVBKl6tmJVPS47x/EaR5zNNHtFESGuA+iFiL:0zJpjS346tmJ1xsG53tFE9uAy
- TLSH T14F0601E033B586F5E2E59F7D01627CACCF361AD186F4EAAD0C8231D74AE27034D1695A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.