General
- Target agent.exe
- Size 11.5MB
- Sample260623-e1xwgsas5q
- SHA256 96dcf1ea77d9352a80494bfe46bc8431c8d221069c0b0af4291f87d7657adcae
- MD5 009ba0f46710477c653b04d679687857
- SHA1 ed5629189870cbbd69b21b4ccc8b2eff82733e57
- SHA512 da22a5e25cf28c1afa0d971e665ab01962b673b4ce3ebb5ac6c152731c0070dbb16b1b94ce4615903a9bad6ec086114a6a8ba03f6321d8b7c77038cc1ea7a74d
- SSDEEP 98304:JBANjZQXra9JnKVL7EJ2AXPt8zyZH2nuVzHa4+bjdmr:J2yXeuLoJJPt8+H2nu8dI
- TLSH T1E0C65A57ECA645E9C5AED134C9769163BB717C484B2023D72B60F6282F33BD0AEB9314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent.exe
Resource
win11ltsc2024-20260618-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target agent.exe
- Size 11.5MB
- SHA256 96dcf1ea77d9352a80494bfe46bc8431c8d221069c0b0af4291f87d7657adcae
- MD5 009ba0f46710477c653b04d679687857
- SHA1 ed5629189870cbbd69b21b4ccc8b2eff82733e57
- SHA512 da22a5e25cf28c1afa0d971e665ab01962b673b4ce3ebb5ac6c152731c0070dbb16b1b94ce4615903a9bad6ec086114a6a8ba03f6321d8b7c77038cc1ea7a74d
- SSDEEP 98304:JBANjZQXra9JnKVL7EJ2AXPt8zyZH2nuVzHa4+bjdmr:J2yXeuLoJJPt8+H2nu8dI
- TLSH T1E0C65A57ECA645E9C5AED134C9769163BB717C484B2023D72B60F6282F33BD0AEB9314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.