General
- Target agent.exe
- Size 8.1MB
- Sample260623-yl46ssfz5s
- SHA256 ac3d3fff7e8d3231296cb9c74abecd6c2a36436a9c9510bcb15c04fc67140272
- MD5 2f93e89cb9fd455d3b4ecfd8f2ed0b75
- SHA1 472ab2e2f834657476616f518b9dd83a6f9c902f
- SHA512 891ffffcc03306441b686272f97cf678a9b7cfb346c726f1a15ffa3ab941832f1779b014aaaa99b017bbedde4b2e7e326de14059a52e971a2467f5b16a490910
- SSDEEP 98304:Os8eZ3VeIZxEW3Iqof5lNE9PJ1B0m9wsHsc9+ioTXIpV67wAaNL:O0rEpqm5le9PJ/Jim7w1TYd
- TLSH T1DE867B07EC9555E9C0AEE2318A739112BF61BC490B3123C71B90F6287F76BE4ADB9354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent.exe
Resource
win11ltsc2024-20260618-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target agent.exe
- Size 8.1MB
- SHA256 ac3d3fff7e8d3231296cb9c74abecd6c2a36436a9c9510bcb15c04fc67140272
- MD5 2f93e89cb9fd455d3b4ecfd8f2ed0b75
- SHA1 472ab2e2f834657476616f518b9dd83a6f9c902f
- SHA512 891ffffcc03306441b686272f97cf678a9b7cfb346c726f1a15ffa3ab941832f1779b014aaaa99b017bbedde4b2e7e326de14059a52e971a2467f5b16a490910
- SSDEEP 98304:Os8eZ3VeIZxEW3Iqof5lNE9PJ1B0m9wsHsc9+ioTXIpV67wAaNL:O0rEpqm5le9PJ/Jim7w1TYd
- TLSH T1DE867B07EC9555E9C0AEE2318A739112BF61BC490B3123C71B90F6287F76BE4ADB9354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.