General
- Target agent.exe
- Size 11.5MB
- Sample260623-evatrsas3j
- SHA256 a9eba4c3db12b193921600ab68ad8c85e08ac97e3930a79a38986683087b2aa6
- MD5 fc308e003275a2b97377d78cdeede44c
- SHA1 3e3cdc336e25afafe63ae7109766d5805b108cee
- SHA512 300c6009fc4f7b145de327da6f8268bb84650cab3e9cf956633bbcb7520f977de2cce98c675de5c49232296adddb0250ee17c8a9a2e8c3d4c33f0a0fac2cfa60
- SSDEEP 98304:hdUzoK8r242dNF69JEPc09YfLVm+EyxqP5rIUvmiFN4+4zefIiGqBmr:hIgCT69KPtYfEPyxq1IUvHdT6
- TLSH T199C65A47ECA645E9C0AED131CA76D223BB717C485B2023D71B50F6296F72BD06EBA314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent.exe
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target agent.exe
- Size 11.5MB
- SHA256 a9eba4c3db12b193921600ab68ad8c85e08ac97e3930a79a38986683087b2aa6
- MD5 fc308e003275a2b97377d78cdeede44c
- SHA1 3e3cdc336e25afafe63ae7109766d5805b108cee
- SHA512 300c6009fc4f7b145de327da6f8268bb84650cab3e9cf956633bbcb7520f977de2cce98c675de5c49232296adddb0250ee17c8a9a2e8c3d4c33f0a0fac2cfa60
- SSDEEP 98304:hdUzoK8r242dNF69JEPc09YfLVm+EyxqP5rIUvmiFN4+4zefIiGqBmr:hIgCT69KPtYfEPyxq1IUvHdT6
- TLSH T199C65A47ECA645E9C0AED131CA76D223BB717C485B2023D71B50F6296F72BD06EBA314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.