General
- Target loader.exe
- Size 73KB
- Sample260623-sdsvxadx2r
- SHA256 9c189aa06b7199d3eddc78f23d5b2cabee9cd7cc6e8a04635757a80b823c81b0
- MD5 d863cfd104ae6a1482728169230459f6
- SHA1 20bfba3109ca5e720912b06ab9f4c68381b0c241
- SHA512 15c31f8fd282c51b0de31fbb265291888db27d84498aac4a1273fa98e2c4b87519d5a2af1e1a8647590e74fe2e034fbf48cffa0d88cbc76311ab080e13389d74
- SSDEEP 1536:ihc5Uk/ZJVfUUFwSBT1Gi9wzwuyGSRHUmTt4CnCGt62dwMewMY8gBPdZSAiBOJzM:iGS3ChTri8xqBJKxkr
- TLSH T1E7732A09C9A2606EC767457ACF030449DEA63C9D87899EF753C19EE60CA5AE47F3C302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loader.exe
Resource
win11-20260513-en
21 signatures
300 seconds
Malware Config
Targets
-
- Target loader.exe
- Size 73KB
- SHA256 9c189aa06b7199d3eddc78f23d5b2cabee9cd7cc6e8a04635757a80b823c81b0
- MD5 d863cfd104ae6a1482728169230459f6
- SHA1 20bfba3109ca5e720912b06ab9f4c68381b0c241
- SHA512 15c31f8fd282c51b0de31fbb265291888db27d84498aac4a1273fa98e2c4b87519d5a2af1e1a8647590e74fe2e034fbf48cffa0d88cbc76311ab080e13389d74
- SSDEEP 1536:ihc5Uk/ZJVfUUFwSBT1Gi9wzwuyGSRHUmTt4CnCGt62dwMewMY8gBPdZSAiBOJzM:iGS3ChTri8xqBJKxkr
- TLSH T1E7732A09C9A2606EC767457ACF030449DEA63C9D87899EF753C19EE60CA5AE47F3C302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.