General
- Target agent.exe
- Size 8.2MB
- Sample260625-g243ash17l
- SHA256 00ebc8ddc2bc361bf2f29858c33e4f627664a549f4a5a65c00b41678fea6fbe3
- MD5 286b280747b676279678ed6eb5b03369
- SHA1 789e3c900f14cc2fce95d300a79e5093e8271d99
- SHA512 43756e4c92230f1ce90daa5a08d4c9da05d6cd3bd945732e9478a3118ace817c1a601d107803dc1f1c57f6d19f2333c3ffcf833fc689e8b88400778d723f9ce4
- SSDEEP 98304:ynlT9ivtIgCqJVys49EYnVSazlktzFNhmY4RSLBmw8u:yh9u4uYoaz0MYuSXn
- TLSH T144867C07EC6554E8C1AED2308A679523BB21BC891B3123C71B90F6297F77BD0AE79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent.exe
Resource
win11ltsc2024-20260618-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target agent.exe
- Size 8.2MB
- SHA256 00ebc8ddc2bc361bf2f29858c33e4f627664a549f4a5a65c00b41678fea6fbe3
- MD5 286b280747b676279678ed6eb5b03369
- SHA1 789e3c900f14cc2fce95d300a79e5093e8271d99
- SHA512 43756e4c92230f1ce90daa5a08d4c9da05d6cd3bd945732e9478a3118ace817c1a601d107803dc1f1c57f6d19f2333c3ffcf833fc689e8b88400778d723f9ce4
- SSDEEP 98304:ynlT9ivtIgCqJVys49EYnVSazlktzFNhmY4RSLBmw8u:yh9u4uYoaz0MYuSXn
- TLSH T144867C07EC6554E8C1AED2308A679523BB21BC891B3123C71B90F6297F77BD0AE79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.