General
- Target FF.exe
- Size 251KB
- Sample260623-bwvnsaas2t
- SHA256 5274993bf01172ffa0c481a0fcd15abd856fc87edee8c3184be5ae86a30f2e38
- MD5 4b48b7f8f72628496349e26274e6c6b5
- SHA1 92131cee9ccf3da1639d04ff3cf11dafc9f3b356
- SHA512 f1f37590a3ada626681753e975e46b9a8e5c1907473cbf7be711cc7356964dc67dbeb62580033b611c7a82f90f38f0b91132eaa4f348b3ef5695782013ec80fb
- SSDEEP 3072:n+PVQhX9hE2gIR/JAgVxlvNVBaNzIGXunyhX9hE2gIR/JAgVxlvNVB:zXLlTjxNNVgskueXLlTjxNNV
- TLSH T17544E00927F05717C5B863FD0950E7B043AA9FC8F772D3428EE55CAB7D62AA189413E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FF.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
FF.exe
Resource
win11ltsc2024-20260617-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target FF.exe
- Size 251KB
- SHA256 5274993bf01172ffa0c481a0fcd15abd856fc87edee8c3184be5ae86a30f2e38
- MD5 4b48b7f8f72628496349e26274e6c6b5
- SHA1 92131cee9ccf3da1639d04ff3cf11dafc9f3b356
- SHA512 f1f37590a3ada626681753e975e46b9a8e5c1907473cbf7be711cc7356964dc67dbeb62580033b611c7a82f90f38f0b91132eaa4f348b3ef5695782013ec80fb
- SSDEEP 3072:n+PVQhX9hE2gIR/JAgVxlvNVBaNzIGXunyhX9hE2gIR/JAgVxlvNVB:zXLlTjxNNVgskueXLlTjxNNV
- TLSH T17544E00927F05717C5B863FD0950E7B043AA9FC8F772D3428EE55CAB7D62AA189413E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.