General
- Target agent.exe
- Size 11.5MB
- Sample260623-ff8ypaaw8t
- SHA256 22f712398447d56a8187ed5b1bc3cd28dd090931e363da8987cf441c6c30c2ce
- MD5 39a5108732006f6e9cfde1485036b8a2
- SHA1 b11e32bb200067642eca8fccd3d696719207376e
- SHA512 601ccccefb4f85697f67224f9d15c75dc169d0fd445cee5d5bb7a737c22e8b27ab0ff85aa2cc1f595c07eece28d993365e8461343edd6711f5314c51eb2f6f80
- SSDEEP 98304:2BANjZQXra9JnKVL7EJ2AXvFf4LuBIhsVHt4+bjdmr:22yXeuLoJJvFQb+HtdI
- TLSH T1C7C65A57ECA646E9C1AED134C9769163BB717C494B2023D71B60F6282F33BD0AEB9314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent.exe
Resource
win11ltsc2024-20260618-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target agent.exe
- Size 11.5MB
- SHA256 22f712398447d56a8187ed5b1bc3cd28dd090931e363da8987cf441c6c30c2ce
- MD5 39a5108732006f6e9cfde1485036b8a2
- SHA1 b11e32bb200067642eca8fccd3d696719207376e
- SHA512 601ccccefb4f85697f67224f9d15c75dc169d0fd445cee5d5bb7a737c22e8b27ab0ff85aa2cc1f595c07eece28d993365e8461343edd6711f5314c51eb2f6f80
- SSDEEP 98304:2BANjZQXra9JnKVL7EJ2AXvFf4LuBIhsVHt4+bjdmr:22yXeuLoJJvFQb+HtdI
- TLSH T1C7C65A57ECA646E9C1AED134C9769163BB717C494B2023D71B60F6282F33BD0AEB9314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.