General
- Target agent.exe
- Size 10.2MB
- Sample260625-k71tlsay3j
- SHA256 e26a0ab3d82614327c16a2a8b5fdb997e31c216f3bfe72915abe27fa6d2acd1c
- MD5 061bf591c89c914171610e3d2f035013
- SHA1 e81c5d7bf83fe7db88f5da798dcb8ee476bb8a10
- SHA512 640f2dcedb510594ebb2223f39c9e61b3499abf1f6184419a5ecf6035ea668983b125de8def6f82e49e7f52438e394362396c2d1dd9534f0c036a560312bc04b
- SSDEEP 98304:fJp6M5kuXoBny5sXbq8Eh6oQtqFwpn43x6noBV7:fWruYg5sLq1B0qgn4cY7
- TLSH T1EBB67C03ED9555E9C2ADD27189779612BB72BC490B2223C71B60F6383F72BD06EB9350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
agent.exe
Resource
win11ltsc2024-20260618-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target agent.exe
- Size 10.2MB
- SHA256 e26a0ab3d82614327c16a2a8b5fdb997e31c216f3bfe72915abe27fa6d2acd1c
- MD5 061bf591c89c914171610e3d2f035013
- SHA1 e81c5d7bf83fe7db88f5da798dcb8ee476bb8a10
- SHA512 640f2dcedb510594ebb2223f39c9e61b3499abf1f6184419a5ecf6035ea668983b125de8def6f82e49e7f52438e394362396c2d1dd9534f0c036a560312bc04b
- SSDEEP 98304:fJp6M5kuXoBny5sXbq8Eh6oQtqFwpn43x6noBV7:fWruYg5sLq1B0qgn4cY7
- TLSH T1EBB67C03ED9555E9C2ADD27189779612BB72BC490B2223C71B60F6383F72BD06EB9350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.